{
  "name": "Monitor Zoho CRM changes & alert on suspicious activity with Google Sheets",
  "nodes": [
    {
      "id": "5ef1f081-7c24-4f08-a87b-f4532fd20d09",
      "name": "Compute Time Window",
      "type": "n8n-nodes-base.function",
      "position": [
        304,
        432
      ]
    },
    {
      "id": "c481ce0d-a3aa-4426-8f25-77829b5f841a",
      "name": "SET - Workflow Config",
      "type": "n8n-nodes-base.set",
      "position": [
        528,
        432
      ]
    },
    {
      "id": "97f137c1-9f6e-49c0-a169-7e85e8f2bc39",
      "name": "Zoho: List Modules",
      "type": "n8n-nodes-base.httpRequest",
      "position": [
        752,
        432
      ]
    },
    {
      "id": "cbb2d34e-3f83-43f4-9d91-de65f90b0c32",
      "name": "Prepare Modules List",
      "type": "n8n-nodes-base.function",
      "position": [
        976,
        432
      ]
    },
    {
      "id": "408d09ed-d78d-4021-88b8-de30f8dfa8e0",
      "name": "Zoho: Search Module Records",
      "type": "n8n-nodes-base.httpRequest",
      "position": [
        1200,
        432
      ]
    },
    {
      "id": "2692224b-d028-4242-bf9f-0b7697de695e",
      "name": "Normalize Module Records",
      "type": "n8n-nodes-base.function",
      "position": [
        1424,
        432
      ]
    },
    {
      "id": "5bcb91fa-e14e-44b4-91f5-2c4611b51195",
      "name": "Analyze for Suspicious Activity",
      "type": "n8n-nodes-base.function",
      "position": [
        1648,
        432
      ]
    },
    {
      "id": "b5452522-ad2e-46f6-a826-e242e3f4e8c1",
      "name": "Create Audit Attachment (JSON)",
      "type": "n8n-nodes-base.function",
      "position": [
        1872,
        240
      ]
    },
    {
      "id": "9a1f02c1-55d2-4812-8868-541eb5c52da1",
      "name": "Log to Google Sheet (append/update)",
      "type": "n8n-nodes-base.googleSheets",
      "position": [
        1872,
        432
      ]
    },
    {
      "id": "5684e67f-30f6-4de0-9f8e-3e9f0b84d563",
      "name": "Check Suspicious? (If)",
      "type": "n8n-nodes-base.if",
      "position": [
        1872,
        624
      ]
    },
    {
      "id": "95254954-ae02-4cb3-bc40-e84f8110dcbd",
      "name": "Notify Security (Email)",
      "type": "n8n-nodes-base.gmail",
      "position": [
        2096,
        560
      ]
    },
    {
      "id": "97529820-0972-47a6-8c73-2a207949ccae",
      "name": "Update lastRun (staticData)",
      "type": "n8n-nodes-base.function",
      "position": [
        2320,
        624
      ]
    },
    {
      "id": "007a26cb-e928-4ea5-adc0-dba5a2ad80f8",
      "name": "Manual Trigger (Run Now)",
      "type": "n8n-nodes-base.manualTrigger",
      "position": [
        80,
        432
      ]
    },
    {
      "id": "1000b339-0979-4e4b-8432-a8319f9b7b84",
      "name": "Sticky - Main (Yellow)",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -832,
        -544
      ],
      "parameters": {
        "width": 800,
        "height": 1328,
        "content": "🟧 How It Works\n\nThis workflow continuously monitors your Zoho CRM modules (Leads, Contacts, Accounts, Deals) to detect record modifications, identify suspicious changes, log them into Google Sheets, g"
      }
    },
    {
      "id": "15d060c9-ee91-4f6e-aea0-d1e8f6e381c7",
      "name": "Sticky - API & Modules (Grey)",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -16,
        -272
      ],
      "parameters": {
        "width": 2512,
        "height": 1056,
        "content": "**Manual Trigger (Run Now)** — Starts the workflow manually for testing or on-demand execution.\n\n**Compute Time Window** — Calculates the ‘from’ and ‘to’ timestamps used to fetch recently modified CRM"
      }
    }
  ],
  "connections": {
    "Zoho: List Modules": {
      "main": [
        [
          {
            "node": "Prepare Modules List",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Compute Time Window": {
      "main": [
        [
          {
            "node": "SET - Workflow Config",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Prepare Modules List": {
      "main": [
        [
          {
            "node": "Zoho: Search Module Records",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "SET - Workflow Config": {
      "main": [
        [
          {
            "node": "Zoho: List Modules",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Check Suspicious? (If)": {
      "main": [
        [
          {
            "node": "Notify Security (Email)",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Update lastRun (staticData)",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Notify Security (Email)": {
      "main": [
        [
          {
            "node": "Update lastRun (staticData)",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Manual Trigger (Run Now)": {
      "main": [
        [
          {
            "node": "Compute Time Window",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Normalize Module Records": {
      "main": [
        [
          {
            "node": "Analyze for Suspicious Activity",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Zoho: Search Module Records": {
      "main": [
        [
          {
            "node": "Normalize Module Records",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Analyze for Suspicious Activity": {
      "main": [
        [
          {
            "node": "Create Audit Attachment (JSON)",
            "type": "main",
            "index": 0
          },
          {
            "node": "Log to Google Sheet (append/update)",
            "type": "main",
            "index": 0
          },
          {
            "node": "Check Suspicious? (If)",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}