{
  "name": "Automate free IP analysis: NixGuard AI summaries & Wazuh integration",
  "nodes": [
    {
      "id": "4e688357-b526-4ec6-aa52-ba57bef8ceea",
      "name": "Execute NixGuard & Wazuh Workflow",
      "type": "n8n-nodes-base.executeWorkflow",
      "position": [
        -420,
        -1220
      ]
    },
    {
      "id": "c1ec5184-46b1-4893-a021-966b95e46c01",
      "name": "Format NixGuard AI Summary & Wazuh Insights",
      "type": "n8n-nodes-base.set",
      "position": [
        -200,
        -1220
      ]
    },
    {
      "id": "698377ac-1c77-45fe-b877-eff606701b82",
      "name": "(Optional) Send Slack Alert for High-Risk Events",
      "type": "n8n-nodes-base.slack",
      "position": [
        40,
        -1220
      ]
    },
    {
      "id": "c534132a-9320-42fc-9db2-786725257cd6",
      "name": "Next Steps: Automate Response",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -200,
        -1000
      ],
      "parameters": {
        "width": 520,
        "height": 380,
        "content": "## ⚡ Next Steps: Automate Your SOC/IR Process\n\nThis workflow doesn't just get data; it helps you take action. The `Set` node formats the powerful insights from NixGuard and Wazuh.\n\nFrom here, you can "
      }
    },
    {
      "id": "cfef93de-f471-410a-b326-ae50f810172c",
      "name": "Set API Key & Initial Prompt1",
      "type": "n8n-nodes-base.set",
      "position": [
        -640,
        -1220
      ]
    },
    {
      "id": "9f8c29b7-c2fc-4ac2-895c-2e3b1d68bde2",
      "name": "Webhook Trigger\n(REAL-WORLD USE)1",
      "type": "n8n-nodes-base.webhook",
      "position": [
        -640,
        -980
      ]
    },
    {
      "id": "b5f50c3b-d692-41e2-8077-a2d6f6e975be",
      "name": "Workflow Overview",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -1260,
        -1220
      ],
      "parameters": {
        "width": 540,
        "height": 440,
        "content": "## 🎯 Workflow Overview: The Dispatcher\n\nThis workflow acts as a **Dispatcher**. Its only job is to provide an input and API key to trigger your main, more complex analysis workflow:\n\n`Get Real-Time Se"
      }
    },
    {
      "id": "2f909465-6db7-4508-9156-8283197a42f5",
      "name": "Setup Instructions",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -640,
        -1740
      ],
      "parameters": {
        "width": 460,
        "height": 440,
        "content": "## ⚙️ **CRITICAL SETUP (2 STEPS)**\n\nThis template requires two actions to function correctly.\n\n**1. Add Your API Key:**\n   - Click the blue `Set API Key & Initial Prompt` node.\n   - In the `apiKey` fi"
      }
    }
  ],
  "connections": {
    "Set API Key & Initial Prompt1": {
      "main": [
        [
          {
            "node": "Execute NixGuard & Wazuh Workflow",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Execute NixGuard & Wazuh Workflow": {
      "main": [
        [
          {
            "node": "Format NixGuard AI Summary & Wazuh Insights",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Format NixGuard AI Summary & Wazuh Insights": {
      "main": [
        [
          {
            "node": "(Optional) Send Slack Alert for High-Risk Events",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}