Analyse automatisée d'IP gratuite
Ceci est unSecOps, AI Summarizationworkflow d'automatisation du domainecontenant 8 nœuds.Utilise principalement des nœuds comme Set, Slack, Webhook, ExecuteWorkflow. Automatisation de l'analyse IP gratuite : résumé NixGuard AI et intégration Wazuh
- •Token Bot Slack ou URL Webhook
- •Point de terminaison HTTP Webhook (généré automatiquement par n8n)
Nœuds utilisés (8)
Catégorie
{
"meta": {
"instanceId": "558d88703fb65b2d0e44613bc35916258b0f0bf983c5d4730c00c424b77ca36a",
"templateCredsSetupCompleted": true
},
"nodes": [
{
"id": "4e688357-b526-4ec6-aa52-ba57bef8ceea",
"name": "Exécuter le Workflow NixGuard & Wazuh",
"type": "n8n-nodes-base.executeWorkflow",
"position": [
-420,
-1220
],
"parameters": {
"options": {},
"workflowId": {
"__rl": true,
"mode": "list",
"value": "I0nUORqYTwDFZa51",
"cachedResultName": "Get Real-Time Security Insights with NixGuard RAG and Wazuh Integration"
},
"workflowInputs": {
"value": {},
"schema": [],
"mappingMode": "passThrough",
"matchingColumns": [],
"attemptToConvertTypes": false,
"convertFieldsToString": true
}
},
"typeVersion": 1.2
},
{
"id": "c1ec5184-46b1-4893-a021-966b95e46c01",
"name": "Formater le Résumé IA NixGuard & les Insights Wazuh",
"type": "n8n-nodes-base.set",
"position": [
-200,
-1220
],
"parameters": {
"values": {
"string": [
{
"name": "ai_summary",
"value": "={{ $json.output }}"
}
]
},
"options": {}
},
"typeVersion": 2
},
{
"id": "698377ac-1c77-45fe-b877-eff606701b82",
"name": "(Optionnel) Envoyer une Alerte Slack pour les Événements à Haut Risque",
"type": "n8n-nodes-base.slack",
"disabled": true,
"position": [
40,
-1220
],
"webhookId": "754f208d-453b-4202-a61a-18a5dce12a9d",
"parameters": {
"text": "=🚨 *NixGuard IP Analysis* 🚨\n\n*AI Summary:*\n{{ $json.ai_summary }}",
"otherOptions": {},
"authentication": "oAuth2"
},
"typeVersion": 2
},
{
"id": "c534132a-9320-42fc-9db2-786725257cd6",
"name": "Prochaines Étapes : Automatiser la Réponse",
"type": "n8n-nodes-base.stickyNote",
"position": [
-200,
-1000
],
"parameters": {
"color": 7,
"width": 520,
"height": 380,
"content": "## ⚡ Next Steps: Automate Your SOC/IR Process\n\nThis workflow doesn't just get data; it helps you take action. The `Set` node formats the powerful insights from NixGuard and Wazuh.\n\nFrom here, you can automate your entire security response:\n- **Enable the Slack Node**: Add your credentials to immediately start receiving alerts.\n- **Create Jira Tickets**: Add a Jira node to automatically create an incident ticket for high-risk events.\n- **Log Results**: Connect a Google Sheets or database node to log every analysis for auditing.\n- **Trigger Remediation**: Connect another `Execute Workflow` node to a workflow that blocks the malicious IP on your firewall."
},
"typeVersion": 1
},
{
"id": "cfef93de-f471-410a-b326-ae50f810172c",
"name": "Définir la Clé API & l'Invite Initiale 1",
"type": "n8n-nodes-base.set",
"position": [
-640,
-1220
],
"parameters": {
"values": {
"string": [
{
"name": "apiKey",
"value": ""
},
{
"name": "chatInput",
"value": "Scan this ip for me 192.227.217.219"
}
]
},
"options": {}
},
"typeVersion": 2
},
{
"id": "9f8c29b7-c2fc-4ac2-895c-2e3b1d68bde2",
"name": "Déclencheur Webhook",
"type": "n8n-nodes-base.webhook",
"active": false,
"position": [
-640,
-980
],
"webhookId": "79b37c02-e2d7-4648-9d54-b5f7786411cd",
"parameters": {
"path": "my-analysis-webhook",
"options": {}
},
"typeVersion": 1
},
{
"id": "b5f50c3b-d692-41e2-8077-a2d6f6e975be",
"name": "(UTILISATION RÉELLE)1",
"type": "n8n-nodes-base.stickyNote",
"position": [
-1260,
-1220
],
"parameters": {
"color": 7,
"width": 540,
"height": 440,
"content": "## 🎯 Workflow Overview: The Dispatcher\n\nThis workflow acts as a **Dispatcher**. Its only job is to provide an input and API key to trigger your main, more complex analysis workflow:\n\n`Get Real-Time Security Insights with NixGuard RAG and Wazuh Integration`\n\nThis powerful combination uses NixGuard's AI to analyze security data from sources like Wazuh.\n\n### Why use this pattern?\n- **Reusable Logic**: Build your complex NixGuard & Wazuh analysis once and trigger it from many different places.\n- **Simplicity & Focus**: This workflow handles the \"how\" and \"when\" of starting the job, while the main workflow handles the \"what\".\n\n---\n**Learn more about NixGuard:** https://nixguard.thenex.world"
},
"typeVersion": 1
},
{
"id": "2f909465-6db7-4508-9156-8283197a42f5",
"name": "Aperçu du Workflow",
"type": "n8n-nodes-base.stickyNote",
"position": [
-640,
-1740
],
"parameters": {
"color": 7,
"width": 460,
"height": 440,
"content": "## ⚙️ **CRITICAL SETUP (2 STEPS)**\n\nThis template requires two actions to function correctly.\n\n**1. Add Your API Key:**\n - Click the blue `Set API Key & Initial Prompt` node.\n - In the `apiKey` field, replace `PASTE_YOUR_NIXGUARD_API_KEY_HERE` with your actual NixGuard API key.\n\n**2. Connect the Main Workflow:**\n - Click the `Execute NixGuard & Wazuh Workflow` node.\n - In the `Workflow` field, select your `Get Real-Time Security Insights...` workflow.\n\n - **Don't have the main workflow yet?** Get it here:\n https://n8n.io/workflows/4693-get-real-time-security-insights-with-nixguard-rag-and-wazuh-integration/"
},
"typeVersion": 1
}
],
"pinData": {},
"connections": {
"cfef93de-f471-410a-b326-ae50f810172c": {
"main": [
[
{
"node": "4e688357-b526-4ec6-aa52-ba57bef8ceea",
"type": "main",
"index": 0
}
]
]
},
"4e688357-b526-4ec6-aa52-ba57bef8ceea": {
"main": [
[
{
"node": "c1ec5184-46b1-4893-a021-966b95e46c01",
"type": "main",
"index": 0
}
]
]
},
"c1ec5184-46b1-4893-a021-966b95e46c01": {
"main": [
[
{
"node": "698377ac-1c77-45fe-b877-eff606701b82",
"type": "main",
"index": 0
}
]
]
}
}
}Comment utiliser ce workflow ?
Copiez le code de configuration JSON ci-dessus, créez un nouveau workflow dans votre instance n8n et sélectionnez "Importer depuis le JSON", collez la configuration et modifiez les paramètres d'authentification selon vos besoins.
Dans quelles scénarios ce workflow est-il adapté ?
Intermédiaire - Opérations de sécurité, Résumé IA
Est-ce payant ?
Ce workflow est entièrement gratuit et peut être utilisé directement. Veuillez noter que les services tiers utilisés dans le workflow (comme l'API OpenAI) peuvent nécessiter un paiement de votre part.
Workflows recommandés
Partager ce workflow