It no secret that Slack's popularity has exploded in recent years- once dubbed \the email killer", organizations have implemented Slack as an efficient collaboration environment either alongside email, and in some instances, replacing email as their primary internal communication mechanism. 'Although a large portion of communication and file transfers are taking place within Slack, often organizations are missing this crucial evidence during an investigation, either due to a lack of understanding or improper retention. Furthermore, organizations should be taking a proactive investigative approach and onboarding Slack as part of their insider threat program.