Slack has no concept of a hard delete. There's always a record, as far as I know. So yes, you'll want to: 1. Delete the message 2. Revoke the token 3. Notify t

Slack has no concept of a hard delete. There's always a record, as far as I know. So yes, you'll want to: 1. Delete the message 2. Revoke the token 3. Notify the user/ security operations team