Slack Capturing Example

This article provides a brief overview of what is captured in Slack Archiving.

Available Content for Capture

The content that Zix captures includes the following:

• Profile snapshot of users in a monitored workspace

• Public Channel messages sent by users in a monitored workspace

  • File attachments added to messages are captured on a separate “Shared File” messages

• Private Channel messages sent to or by the Owner/Admin of a monitored workspace

  • Slack restricts access to Private messages of other users in a workspace

• Direct messages sent to or by the Owner/Admin of a monitored workspace

  • File attachments added to messages are captured on a separate “Shared File” message

  • Slack restricts access to Privet messages of “non-Owner” users in a workspace

• Shared File message includes attachments from Direct messages and Channel messages

Message Subject-lines and Captured Headers

View captured Headers by clicking “View Headers” checkbox in ZixCentral Message Viewer:

x-erado-env-mail-from:  workspacenameworkspace@domain.com

x-erado-direction: Out (outbound from the user)

x-erado-source: slack.com

x-erado-sm-acct: user@domain.com   (Business email address of account in workspace)

x-erado-post-date: Tue, 12 Jun 2018 15:09:28 (date/time of post)

x-erado-capture-date: Tue, 12 Jun 2018 16:04:07 (date/time of post captured)

The types of posts have the following details in the subject line of each item.

Profile -- Subject line:  “Slack Profile of [User]”

x-erado-media-type: Post

x-erado-media-post-type: profile

Direct Message -- Subject line:  “Slack Direct Message of [User]”

x-erado-media-type: Post

x-erado-media-post-type: message

Public Channel Message -- Subject line:  “Slack Public Message of [User] in [Channel-Name] channel”

x-erado-media-type: Post

x-erado-media-post-type: message

Private Channel Message -- Subject line:  “Slack Private Message of [User] in [Channel-Name] channel”

x-erado-media-type: Post

x-erado-media-post-type: message

File Attachment Message -- Subject line:  “Slack Shared File of [User]”

x-erado-media-type: Post

x-erado-media-post-type: message