Begin by watching the list of extensions your organization has installed. When a change occurs, a notification will be instantly sent to a webhook. This could be your SIEM, SOAR, or even just a Slack channel. Two extensions can be monitored by all organizations.

No longer will teams be caught surprised by extensions changing silently, these proactive notifications give the ability to react in real time.