{
  "name": "BlueOps Auto CVE & IOC feed ingestor with OpenAI risk triage & email alerts",
  "nodes": [
    {
      "id": "b9325536-f714-437d-8dc3-2dfbfd6d58a7",
      "name": "⏰ Cron – Daily Trigger",
      "type": "n8n-nodes-base.scheduleTrigger",
      "position": [
        -220,
        -560
      ]
    },
    {
      "id": "c9f242d6-6d9c-4a27-8a43-b678c4b3dbeb",
      "name": "🌐 Get CVE Feed",
      "type": "n8n-nodes-base.httpRequest",
      "position": [
        20,
        -640
      ]
    },
    {
      "id": "e1f9ea1c-e934-4ecd-957d-8c7e5f8c1452",
      "name": "🛡️ Get IOC Feed",
      "type": "n8n-nodes-base.httpRequest",
      "position": [
        20,
        -480
      ]
    },
    {
      "id": "080ac947-b10c-4492-8f55-79e27b9982c0",
      "name": "🧠 Merge Threat Data",
      "type": "n8n-nodes-base.merge",
      "position": [
        220,
        -560
      ]
    },
    {
      "id": "80c5acb7-743a-44d7-8482-a5d429a973bd",
      "name": "🧠Combine Threat Data",
      "type": "n8n-nodes-base.code",
      "position": [
        220,
        -360
      ]
    },
    {
      "id": "68ccba75-0a92-4cd1-8306-24daafe59333",
      "name": "🧠 AI – Risk Evaluation",
      "type": "n8n-nodes-base.code",
      "position": [
        220,
        -180
      ]
    },
    {
      "id": "9f74ff1c-57ae-48ae-989d-b27b64895c53",
      "name": "🧠 AI – Triage Vulnerabilities",
      "type": "n8n-nodes-base.code",
      "position": [
        220,
        0
      ]
    },
    {
      "id": "3cbac00e-3bf1-4f68-99e2-e2027d3d2648",
      "name": "🚨 ALERT – LEV Trigger",
      "type": "n8n-nodes-base.if",
      "position": [
        220,
        200
      ]
    },
    {
      "id": "2341d7f3-4f5e-4bf0-8b96-fb64c4d46344",
      "name": "📧 Send Alert Email",
      "type": "n8n-nodes-base.emailSend",
      "position": [
        420,
        140
      ]
    },
    {
      "id": "bead2d6d-aeec-49a3-99b0-6550976cfa91",
      "name": "Google Sheets",
      "type": "n8n-nodes-base.googleSheets",
      "position": [
        420,
        300
      ]
    },
    {
      "id": "6be8438a-956d-4ac6-94e5-dc22cebaa178",
      "name": "🧠 AI – Incident Playbook Selector",
      "type": "n8n-nodes-base.code",
      "position": [
        660,
        -180
      ]
    },
    {
      "id": "2aa9749e-cf1d-49ee-8a82-b75a6a62d1af",
      "name": "Code",
      "type": "n8n-nodes-base.code",
      "position": [
        840,
        -180
      ]
    },
    {
      "id": "6dd8f1cf-4459-4496-b547-205da0aa2ab7",
      "name": "🧭 Response Router",
      "type": "n8n-nodes-base.switch",
      "position": [
        1020,
        -180
      ]
    },
    {
      "id": "4123923e-bbbd-4234-8769-43dcd65cf9c8",
      "name": "Send Alert Email",
      "type": "n8n-nodes-base.emailSend",
      "position": [
        1340,
        -360
      ]
    },
    {
      "id": "d76f1894-ae5c-4c22-b326-7daec1cdf359",
      "name": "Log to Google Sheet",
      "type": "n8n-nodes-base.googleSheets",
      "position": [
        1340,
        -180
      ]
    },
    {
      "id": "9d9a56b4-13fd-40f8-a29a-4d3a3febfc19",
      "name": "HTTP Request",
      "type": "n8n-nodes-base.httpRequest",
      "position": [
        1340,
        0
      ]
    },
    {
      "id": "d5376f73-da94-4a39-9129-7f94c9b6d86c",
      "name": "Split Out",
      "type": "n8n-nodes-base.splitOut",
      "position": [
        500,
        -180
      ]
    },
    {
      "id": "da91b5b0-a2ff-4d91-9837-eafdb1aa7ed4",
      "name": "Sticky Note",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1600,
        -380
      ],
      "parameters": {
        "width": null,
        "height": null,
        "content": ""
      }
    },
    {
      "id": "1bae77e9-6f51-4a51-85d6-051ad1198030",
      "name": "Sticky Note1",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        2180,
        -380
      ],
      "parameters": {
        "width": null,
        "height": null,
        "content": ""
      }
    },
    {
      "id": "0a7a9166-b06d-4a48-9420-70af07392046",
      "name": "Sticky Note2",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        2180,
        320
      ],
      "parameters": {
        "width": null,
        "height": null,
        "content": ""
      }
    },
    {
      "id": "c3323b86-bb2b-4d62-9dcc-2509a1a6b893",
      "name": "Sticky Note3",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        2180,
        520
      ],
      "parameters": {
        "width": null,
        "height": null,
        "content": ""
      }
    }
  ],
  "connections": {
    "Code": {
      "main": [
        [
          {
            "node": "🧭 Response Router",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Split Out": {
      "main": [
        [
          {
            "node": "🧠 AI – Incident Playbook Selector",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Send Alert Email": {
      "main": [
        []
      ]
    },
    "🌐 Get CVE Feed": {
      "main": [
        [
          {
            "node": "🧠 Merge Threat Data",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "🛡️ Get IOC Feed": {
      "main": [
        [
          {
            "node": "🧠 Merge Threat Data",
            "type": "main",
            "index": 1
          }
        ]
      ]
    },
    "🧭 Response Router": {
      "main": [
        [
          {
            "node": "Send Alert Email",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Log to Google Sheet",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "HTTP Request",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "📧 Send Alert Email": {
      "main": [
        []
      ]
    },
    "🧠 Merge Threat Data": {
      "main": [
        [
          {
            "node": "🧠Combine Threat Data",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "🧠Combine Threat Data": {
      "main": [
        [
          {
            "node": "🧠 AI – Risk Evaluation",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "⏰ Cron – Daily Trigger": {
      "main": [
        [
          {
            "node": "🌐 Get CVE Feed",
            "type": "main",
            "index": 0
          },
          {
            "node": "🛡️ Get IOC Feed",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "🚨 ALERT – LEV Trigger": {
      "main": [
        [
          {
            "node": "📧 Send Alert Email",
            "type": "main",
            "index": 0
          },
          {
            "node": "Google Sheets",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "🧠 AI – Risk Evaluation": {
      "main": [
        [
          {
            "node": "🧠 AI – Triage Vulnerabilities",
            "type": "main",
            "index": 0
          },
          {
            "node": "Split Out",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "🧠 AI – Triage Vulnerabilities": {
      "main": [
        [
          {
            "node": "🚨 ALERT – LEV Trigger",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "🧠 AI – Incident Playbook Selector": {
      "main": [
        [
          {
            "node": "Code",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}