Execute Cortex Job Report and Responder Actions

• Automate security incident analysis using Cortex.
• Streamline the process of retrieving job reports for IP observables.
• Enhance threat intelligence response with automated actions.

Starts the workflow with a trigger node. Executes a job in Cortex to analyze a specified IP address. Retrieves the job report from Cortex for further insights. Processes results through a responder for incident handling. Incorporates a delay to manage execution timing.

1. 1
   Import the workflow template into n8n.
2. 2
   Configure the Cortex API credentials.
3. 3
   Adjust any parameters as necessary for your specific use case.
4. 4
   Activate the workflow to start processing IP observables.