Skip to main content

Who is this article for?

Incydr Professional, Enterprise, Gov F2, and Horizon
Incydr Basic, Advanced, and Gov F1

Find your product plan in the Code42 console on the Account menu.
Not an Incydr customer? For CrashPlan articles, search or browse.

Instructor, no.

Incydr Professional, Enterprise, Gov F2, and Horizon, yes.

Incydr Basic, Advanced, and Gov F1, yes.

CrashPlan Cloud, no.

Retired product plans, no.

CrashPlan for Small Business, no.

HOME
GETTING STARTED
RELEASE NOTES
FAQs
APIs
SYSTEM STATUS
Code42 Support

Introduction to Incydr Flows

Overview

Incydr Flows connect other systems or workflows to Code42, speeding the process for detecting, investigating, and responding to insider risks. These integrations can add contextual information about users and orchestrate response controls. This article provides a brief introduction to Incydr Flows.

For information about configuring Incydr Flows connections in the Code42 console, see Configure Incydr Flows

Considerations

  • Incydr Flows are a paid service on some product plans
  • Incydr Flows are not available in the Code42 federal environment.
  • A Code42 Professional Services team member works with you to set up and configure Incydr Flows. Contact your Customer Success Manager (CSM) to engage the Code42 Professional Services team and get started.
  • Incydr Flows can be configured to run automatically or manually:
    • Automatically: The workflow runs when specific criteria are met.
    • Manually: The workflow is available to run manually from the Code42 console. It appears as an option under Custom Actions in the Actions menu. This Actions menu is available from the User Profile and when you investigate a user's activity.  
      Actions button

Use cases

Use Incydr Flows to take custom actions to meet a variety of use cases. Work with the Code42 Professional Services team to determine what systems and workflows to integrate to meet your goals in mitigating insider risk.

Context Flows

Incydr Context Flows are a category of automated integrations in which user information is ingested into Code42 from other systems. For example:

  • Ingest user context such as departure date or employment status from human capital management (HCM) systems, such as Workday or BambooHR. 
  • Automatically add users to the Departing watchlist based on updates to information in your HCM system, such as Workday or BambooHR.

Response Flows

Incydr Response Flows are a category of automated integrations used to contain or resolve a situation, or to educate a user. For example:

  • When an alert is triggered in Code42, a Slack message is automatically generated to members of your security team. Those team members can then review and respond to the alert by: 
    • Clicking links in the Slack message to the Code42 console to start investigating 
    • Generating a direct Slack message template to send to the actor involved in the alert
    • Closing the alert from within Slack  

Next steps 

  • Once you determine what systems and workflows to integrate, collaborate with others in your organization who manage those systems. In the setup process, those stakeholders provide input and help manage access to those systems. 
  • Create a Code42 user service account to use to configure Incydr Flows. This account must be a local (non-SSO) user to which you assign roles that provide the necessary permissions. We recommend you assign the roles in our use case for managing a security application integrated with Code42
  • Configure your vendor systems in preparation for use with Incydr Flows.
  • Consider whether to use a separate test environment to test and validate your workflows first. 
  • Contact your Customer Success Manager (CSM) to engage the Code42 Professional Services team and get started.
  • Was this article helpful?