Qualys SaaS Detection and Response (SaaSDR) recognizes and classifies SaaS data based on the application type. This page lists how SaaSDR recognizes and classifies Slack data.
SaaSDR classifies its users as Internal or External. When working with Slack, the email address of the scan user is used to determine the domain of the organization. Any user whose email address is in the same domain is considered as an Internal user and the others are considered External users.
For example, if the user who scans the connector has the email address firstname.lastname@example.org, then “companyx.com” defines the domain, and all users with the email address containing @companyx.com as the domain are Internal users and others are External users.