> This page is for Applications Protection.

> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.humansecurity.com/llms.txt.

# Slack notifications

Account Defender can automatically send you **Slack notifications** when it detects incidents matching your existing **Policy Rules.** You can learn how to configure Slack notifications in this article.

## Prerequisites

* An existing Account Defender policy rule to add the action to. See [Create Account Defender policy rules](/applications/create-account-defender-policy-rules) for more information.
* Have Account Defender **Admin** permissions to add and manage actions. See [Role permissions](/applications/role-permissions) for more information.
* A configured [Slack Integration](/applications/slack-integration/).

## Create a Slack ActionAdd

Before you can add an action to a policy rule, you need to create it.

1. Navigate to **Account Defender > Settings > Action Settings.**
2. Click **+ Add Action.**
3. Complete the following fields:
   * **Action name:** The name that will appear for the action throughout the HUMAN console.
   * **Action type:** Select **Slack notification.** This will also show a preview of your Slack message.
   * **Cooldown duration:** The length of time Account Defender should wait to trigger this action each time it detects a match on the rule it's assigned to.
   * **Duration unit:** The unit of time for the cooldown.
   * **Integration details:** The Slack integration you want to use for this action.
   * **Application data source:** The application the action will be available on.
   * **Event type:** The type of event the action will be triggered by.
   * **Slack message content settings:** Select any additional fields you want to include in the Slack message. Default fields are required and cannot be removed.
4. Click **Save changes.**

Your Slack notification action has been created. Next, be sure to add it to a policy rule.

## Add a Slack notification action to a policy rule

Once you have a Slack notification action, we recommend adding it to a **policy rule** so you can automate when a request is sent.

> **Note**
>
> Be sure your policy rule’s **application** and **event type** match the ones you chose above. Otherwise, the action won’t appear when you try to add it to the rule.

1. Navigate to **Account Defender > Policies > Policy Rules.**
2. Select a rule to edit or create a new rule. See [our article](/applications/create-account-defender-policy-rules) for more on creating policy rules.
3. From the **Actions** menu, click and drag **Data Export** to the **THEN** field.

![](/_fern-img/322778dc75349f0f5195218f39b0cb6bc878ed22c574e7e5c20ccc6a89d30b29.webp)

4. Enter a **Slack channel** to send notifications to.

![](/_fern-img/c68cd0068b8c4260d71ef9b1f5f93062d1ec3b638064dffee5733736ef1c507d.webp)

5. Finish any other changes to your policy rule, then click **Simulate** rule.
6. Click **Save changes.**

Now, whenever Account Defender detects an attack that matches the conditions in that policy rule, the account owner will receive a Slack notification with the content you specified in [Create a Slack Action.](#create-a-slack-action)