Threat Intelligence Report Generation from VirusTotal and Greynoise

• Automate threat intelligence reporting for URLs and IPs
• Integrate security data from multiple sources for comprehensive analysis
• Enhance incident response with timely notifications and reports

Webhook form captures user input for URLs or IPs DNS lookup is performed to resolve IP addresses VirusTotal scans are initiated for submitted URLs Greynoise contextual checks are conducted for IPs Results from both platforms are merged for analysis Final reports are sent via email and Slack notifications

1. 1
   Import the workflow template into your n8n instance
2. 2
   Configure the webhook settings to match your domain
3. 3
   Set up credentials for VirusTotal and Greynoise integrations
4. 4
   Test the webhook form with sample URLs or IPs
5. 5
   Monitor execution results and adjust as necessary