HelloWe finally moved to SOAR and are experiencing an issue with our first integration. I've enabled the Slack integration to allow SOAR -> Slack communication, however, it appears that Slack -> SOAR won't work unless I provide slack with an interact...

Hey AllIn the workspace user parser my users get the same email added to the entity.user.email_addresses field. sample user record with duplicated email addressesThis is slightly annoying, so I tried to remove it. My idea was to just dedupe at the bo...

How are others ingesting Gmail logs into Chronicle?We've been sending them directly to BQ and querying them there for months, but would love to have the data available in Chronicle. AFAIK we can't access the logs that are exported to BQ through an AP...