{
  "name": "New TheHive case Slack notification bot",
  "nodes": [
    {
      "id": "71dd0b5e-7bb0-4d06-9769-753156d1acf3",
      "name": "TheHive Trigger",
      "type": "n8n-nodes-base.theHiveProjectTrigger",
      "position": [
        20,
        300
      ]
    },
    {
      "id": "659339a5-3b3e-4f57-8aec-4c368b01890c",
      "name": "Sticky Note",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        280,
        520
      ],
      "parameters": {
        "width": 455.1635858314854,
        "height": 538.2816200839441,
        "content": "![slack](https://uploads.n8n.io/templates/slack.png)\n## Events Webhook Trigger\nThe first node receives all messages from Slack API via Subscription Events API. You can find more information about sett"
      }
    },
    {
      "id": "c3ec7525-41f5-426c-a1c9-63b4596c8632",
      "name": "Sticky Note2",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -160,
        -60
      ],
      "parameters": {
        "width": 543.689530484159,
        "height": 516.5011820330969,
        "content": "![theHive](https://uploads.n8n.io/templates/thehive.png)\n## TheHive Trigger\nTo setup TheHive 5's triggers, visit the Settings in TheHive and add a webhook using the url found TheHive node."
      }
    },
    {
      "id": "d754ebe1-8a9e-4ae2-9a51-b6d359866ec3",
      "name": "Sticky Note3",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        400,
        -60
      ],
      "parameters": {
        "width": 686.8181233897246,
        "height": 516.5011820330969,
        "content": "![Slack](https://uploads.n8n.io/templates/slack.png)\n## Post TheHive Case to Slack\nThe Case data is then mapped to Slack Block Kit and pushed to Slack. In Slack, it lives as a database object, mapping"
      }
    },
    {
      "id": "6ac8fc89-6640-4799-93cb-eb1afa0e35c9",
      "name": "Edit Fields",
      "type": "n8n-nodes-base.set",
      "position": [
        580,
        880
      ]
    },
    {
      "id": "86f90f83-c115-4561-8c0f-432c2ebb18b5",
      "name": "Task Modal",
      "type": "n8n-nodes-base.httpRequest",
      "position": [
        1800,
        3040
      ]
    },
    {
      "id": "e2874195-4b4e-4288-937f-201e4a361438",
      "name": "HTTP Request",
      "type": "n8n-nodes-base.httpRequest",
      "position": [
        460,
        300
      ]
    },
    {
      "id": "9fbf2b59-e6c3-45b5-aceb-5e98ebad9814",
      "name": "Formatting Dictionaries",
      "type": "n8n-nodes-base.set",
      "position": [
        240,
        300
      ]
    },
    {
      "id": "f5ab276e-809b-41df-ba86-020c1b3681e1",
      "name": "Prep Fields For Slack",
      "type": "n8n-nodes-base.set",
      "position": [
        680,
        300
      ]
    },
    {
      "id": "b7747c0c-52ec-415b-aa55-ce399b53054b",
      "name": "Update Message with new Assignee",
      "type": "n8n-nodes-base.httpRequest",
      "position": [
        3200,
        1160
      ]
    },
    {
      "id": "b548c331-1612-40a9-806c-8136c1eb6dbe",
      "name": "Sticky Note4",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1140,
        385.7161688656365
      ],
      "parameters": {
        "width": 706.9954015609856,
        "height": 467.56934570944634,
        "content": "![Slack](https://uploads.n8n.io/templates/slack.png)\n## Assign Case to Others\nSince slack does not send the slack user email, we must take the extra step \nof passing the user ID back to slack, and get"
      }
    },
    {
      "id": "34dc3eb9-e19a-46c1-947d-65c9c5be9993",
      "name": "Sticky Note5",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1140,
        860
      ],
      "parameters": {
        "width": 1400.2199299541444,
        "height": 1720.4067726820667,
        "content": "![theHive](https://uploads.n8n.io/templates/thehive.png)\n# Streamlined Case Updates via Slack for SOC Analysts\n\n## This workflow segment is crucial for enhancing the responsiveness and efficiency of S"
      }
    },
    {
      "id": "233924c6-eceb-4618-90fa-2633f0e3cf84",
      "name": "Sticky Note7",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1135,
        3242
      ],
      "parameters": {
        "width": 988.1220012094333,
        "height": 613.5055433060886,
        "content": "![slack](https://uploads.n8n.io/templates/slack.png)\n## Add a task to a Case - Process the task details\nOnce the modal window is submitted, this sections then processes the data sent in. Certain field"
      }
    },
    {
      "id": "c32929b9-9f57-4f70-86da-e038c786d360",
      "name": "Check if Case Options",
      "type": "n8n-nodes-base.if",
      "position": [
        1175,
        3560
      ]
    },
    {
      "id": "5887da0e-36eb-4bd3-8dba-6422dc8fa70a",
      "name": "Case Slack Block Rebuild",
      "type": "n8n-nodes-base.set",
      "position": [
        2340,
        680
      ]
    },
    {
      "id": "0dc10f84-c087-45ab-8b1d-f770725f400b",
      "name": "Close Case Block Rebuild",
      "type": "n8n-nodes-base.set",
      "position": [
        2400,
        1700
      ]
    },
    {
      "id": "3b95146f-d842-4c69-b537-bad5603ba0d0",
      "name": "Severity Case Block Rebuild1",
      "type": "n8n-nodes-base.set",
      "position": [
        2400,
        1880
      ]
    },
    {
      "id": "be1fe770-aaa2-4ed2-9ff1-5baa00423d76",
      "name": "PAP Case Block Rebuild",
      "type": "n8n-nodes-base.set",
      "position": [
        2400,
        2060
      ]
    },
    {
      "id": "0d9a2036-6a4c-4ffd-95a8-34b6861894b9",
      "name": "Prep Fields For PAP Slack",
      "type": "n8n-nodes-base.set",
      "position": [
        1600,
        2060
      ]
    },
    {
      "id": "574caf88-eef7-4b06-9f04-7a468ef56325",
      "name": "Map Actions",
      "type": "n8n-nodes-base.set",
      "position": [
        2700,
        1160
      ]
    },
    {
      "id": "d0e2d26f-9ab1-4f4f-a700-d686dda8dbef",
      "name": "Build Final Block",
      "type": "n8n-nodes-base.set",
      "position": [
        2920,
        1160
      ]
    },
    {
      "id": "e189e865-664a-47c1-b877-59788967c852",
      "name": "Prep Fields For TLP Slack",
      "type": "n8n-nodes-base.set",
      "position": [
        1600,
        2240
      ]
    },
    {
      "id": "286a5624-a546-4a7f-a416-0b4ef66a99d7",
      "name": "Prep Fields For Status Slack",
      "type": "n8n-nodes-base.set",
      "position": [
        1600,
        2420
      ]
    },
    {
      "id": "bdaa7347-dd4f-4183-9f21-979557320603",
      "name": "Update Status in TheHive",
      "type": "n8n-nodes-base.theHiveProject",
      "position": [
        2060,
        2420
      ]
    },
    {
      "id": "06320f47-c22d-4285-9885-0f3148702dd9",
      "name": "Close Case as False Positive",
      "type": "n8n-nodes-base.theHiveProject",
      "position": [
        2060,
        1700
      ]
    },
    {
      "id": "14d2eebc-17f7-4004-b4d2-17f38e1c6aaa",
      "name": "Status Case Block Rebuild",
      "type": "n8n-nodes-base.set",
      "position": [
        2400,
        2420
      ]
    },
    {
      "id": "eff9d872-a2e0-42ff-ba18-645d044a95b7",
      "name": "TLP Case Block Rebuild",
      "type": "n8n-nodes-base.set",
      "position": [
        2400,
        2240
      ]
    },
    {
      "id": "ddf72a31-3655-423d-bf47-c405563ebf46",
      "name": "No Action Needed",
      "type": "n8n-nodes-base.noOp",
      "position": [
        1520,
        4140
      ]
    },
    {
      "id": "7e3155d1-69d0-4773-97f7-61cdc55d04ad",
      "name": "Sticky Note11",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1140,
        2600
      ],
      "parameters": {
        "width": 792.317043267064,
        "height": 631.3919967555308,
        "content": "![slack](https://uploads.n8n.io/templates/slack.png)\n## Add a task to a Case - Display Modal Popup\nThis section of the workflow focuses on enhancing task management directly within Slack, allowing use"
      }
    },
    {
      "id": "90fc2f6d-8e22-477e-ab6e-3282d1d1e6f0",
      "name": "Sticky Note12",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1856.0596905369107,
        385.2537459507854
      ],
      "parameters": {
        "width": 691.0596729578308,
        "height": 465.39159795232865,
        "content": "![theHive](https://uploads.n8n.io/templates/thehive.png)\n## Assign Case to Others\nLastly the assignee data is passed into TheHive in \nthe correct format. We then use the Set node to \nbegin the process"
      }
    },
    {
      "id": "50435336-d159-4477-aeb4-228bdfcb1003",
      "name": "Sticky Note13",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        2640,
        449.39422080427823
      ],
      "parameters": {
        "width": 952.9348524840666,
        "height": 895.6351014818621,
        "content": "![slack](https://uploads.n8n.io/templates/slack.png)\n# Dynamic Slack Message Updates in Workflow\n\nThis section of the workflow focuses on dynamically updating Slack messages to reflect changes in TheH"
      }
    },
    {
      "id": "97b8bae8-1711-4c11-81f0-d2e0c50d10e6",
      "name": "Sticky Note14",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        2135,
        3243
      ],
      "parameters": {
        "width": 409.70915573152797,
        "height": 570.3745712311052,
        "content": "![Imgur](https://uploads.n8n.io/templates/thehive.png)\n## Add a task to a Case - Process the task details\nThe data is then processed in TheHive using the native n8n node. "
      }
    },
    {
      "id": "1c7c5f11-d8f0-4623-b303-1ebf4adb3b79",
      "name": "Sticky Note15",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        751.1129156240361,
        520
      ],
      "parameters": {
        "width": 374.56596023868,
        "height": 628.1281535316614,
        "content": "![n8n](https://uploads.n8n.io/templates/n8n.png)\n## n8n Switch Node\nThis node checks the messages from Slack and routes them down the appropriate route in the workflow. \n\nIt is an invaluable tool that"
      }
    },
    {
      "id": "4fd498e7-31cf-4d9f-b888-ede79e42e79f",
      "name": "Post New Case To Slack",
      "type": "n8n-nodes-base.slack",
      "position": [
        880,
        300
      ]
    },
    {
      "id": "94f38341-660a-451b-a02a-7dc2d327e323",
      "name": "Prep Fields For Slack - Close",
      "type": "n8n-nodes-base.set",
      "position": [
        1600,
        1700
      ]
    },
    {
      "id": "6a6644ec-0391-40e3-88aa-0d2c4c9a4a41",
      "name": "Prep Fields For Slack - Assign",
      "type": "n8n-nodes-base.set",
      "position": [
        1460,
        680
      ]
    },
    {
      "id": "f3d194d1-9548-43ce-a7b6-a1d6b4c1c5cd",
      "name": "Prep Fields For Slack - Severity",
      "type": "n8n-nodes-base.set",
      "position": [
        1600,
        1880
      ]
    },
    {
      "id": "bc66064d-dc16-485a-8e95-19bead7e5ec7",
      "name": "Update Case Severity",
      "type": "n8n-nodes-base.theHiveProject",
      "position": [
        2060,
        1880
      ]
    },
    {
      "id": "5f4eae8d-16e2-4a3a-b8dd-7af9f7f0bb4b",
      "name": "Update Case PAP",
      "type": "n8n-nodes-base.theHiveProject",
      "position": [
        2060,
        2060
      ]
    },
    {
      "id": "c95539f5-e365-4404-897b-65af116c89cb",
      "name": "Update Case TLP",
      "type": "n8n-nodes-base.theHiveProject",
      "position": [
        2060,
        2240
      ]
    },
    {
      "id": "edfedf66-df2a-421e-a53d-11ee32623be0",
      "name": "Acknowledge Close Case to Slack",
      "type": "n8n-nodes-base.respondToWebhook",
      "position": [
        1180,
        1700
      ]
    },
    {
      "id": "791fea8b-67b3-4dd8-943f-29f750485a10",
      "name": "Acknowledge Severity Update to Slack",
      "type": "n8n-nodes-base.respondToWebhook",
      "position": [
        1180,
        1880
      ]
    },
    {
      "id": "14f59582-7a18-44ab-bb1e-19d5141dace5",
      "name": "Acknowledge PAP Update to Slack",
      "type": "n8n-nodes-base.respondToWebhook",
      "position": [
        1180,
        2060
      ]
    },
    {
      "id": "55b3ecfa-2be6-41f5-818c-5980f896832f",
      "name": "Acknowledge TLP Update to Slack",
      "type": "n8n-nodes-base.respondToWebhook",
      "position": [
        1180,
        2240
      ]
    },
    {
      "id": "4a4ef31e-de26-4e4e-b0f5-bef77c8c2801",
      "name": "Acknowledge Status Update to Slack",
      "type": "n8n-nodes-base.respondToWebhook",
      "position": [
        1180,
        2420
      ]
    },
    {
      "id": "cb7647b0-199c-4aa8-84d3-748bb52f1e7e",
      "name": "Acknowledge Modal Request to Slack",
      "type": "n8n-nodes-base.respondToWebhook",
      "position": [
        1180,
        3040
      ]
    },
    {
      "id": "20f028c6-1e15-4d3c-a4ad-5ae716fdc1db",
      "name": "Sticky Note16",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1940,
        2680
      ],
      "parameters": {
        "width": 431.4429614751546,
        "height": 532.2137131625435,
        "content": "![Imgur](https://uploads.n8n.io/templates/hivemodal.png)"
      }
    },
    {
      "id": "661e067b-c11c-44e1-9767-a7b5776a2c4c",
      "name": "Sticky Note17",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1100,
        -83.7829059126309
      ],
      "parameters": {
        "width": 431.4429614751546,
        "height": 453.21603562878454,
        "content": "![Imgur](https://uploads.n8n.io/templates/thehivereport.png)\n### New cases will appear in slack in this format with the ability to quickly change variables in TheHive with quick actions baked in. "
      }
    },
    {
      "id": "08c174f4-b486-4a18-b627-2d64229d9148",
      "name": "Parse Message Type",
      "type": "n8n-nodes-base.switch",
      "position": [
        860,
        900
      ]
    },
    {
      "id": "1f489dfa-d1d4-450c-853d-6d006581018a",
      "name": "Sticky Note1",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1140,
        3860
      ],
      "parameters": {
        "width": 839.546315272846,
        "height": 472.04545691749547,
        "content": "![slack](https://uploads.n8n.io/templates/slack.png)\n## 🤝Responding to Slack when someone clicks a link \nThis section of the workflow ensures that when a user interacts with a Slack message that invok"
      }
    },
    {
      "id": "ad83c6b0-cde4-48b6-b505-8f9e1ded2066",
      "name": "Respond positive to Slack when someone clicks a link",
      "type": "n8n-nodes-base.respondToWebhook",
      "position": [
        1180,
        4140
      ]
    },
    {
      "id": "f2668b62-cd3c-41d6-ada3-37e6ba331b90",
      "name": "Respond 204 to Slack",
      "type": "n8n-nodes-base.respondToWebhook",
      "position": [
        1380,
        3720
      ]
    },
    {
      "id": "a46648ce-f125-4de6-95cf-9c61c466e43c",
      "name": "Close Modal with 204 response",
      "type": "n8n-nodes-base.respondToWebhook",
      "position": [
        1420,
        3540
      ]
    },
    {
      "id": "aa35e086-ace4-413a-9cd8-bed51dad94e7",
      "name": "Get Slack User's Email From Slack",
      "type": "n8n-nodes-base.slack",
      "position": [
        1700,
        680
      ]
    },
    {
      "id": "717a650d-250f-4538-92cb-fa2f7368a9cd",
      "name": "Update TheHive Case with new Assignee",
      "type": "n8n-nodes-base.theHiveProject",
      "position": [
        2020,
        680
      ]
    },
    {
      "id": "1915c609-edf2-4bfe-95db-88ab31ae4fa6",
      "name": "Respond to Slack with 200 response",
      "type": "n8n-nodes-base.respondToWebhook",
      "position": [
        1220,
        680
      ]
    },
    {
      "id": "2b9b03cd-2f70-429a-b27f-9eb26663101a",
      "name": "Sticky Note6",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1660,
        460
      ],
      "parameters": {
        "width": 171.29382736351008,
        "height": 165.28509020280688,
        "content": "### 📧 GDPR Warning\nThis workflow requires additional permissions from your Slack app that may not be available in your region."
      }
    },
    {
      "id": "eb76195a-42ef-4716-9b94-ba52f3746e3c",
      "name": "Sticky Note8",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        2220,
        420
      ],
      "parameters": {
        "width": 306.95426010827737,
        "height": 207.67897543554668,
        "content": "### 📧 Ensure the Slack users emails match those in TheHive\nThis assumes that your TheHive user's emails are the same as the same user's email in Slack. Please note that there is no error handling for "
      }
    },
    {
      "id": "1da14415-e66a-41bc-8f6e-f57c1180924c",
      "name": "Sticky Note9",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        -420,
        500
      ],
      "parameters": {
        "width": 670.2591130283372,
        "height": 1196.0687210874733,
        "content": "![theHive](https://uploads.n8n.io/templates/thehive.png)\n# Streamline Case Management in TheHive via Slack!\n\n## Our **TheHive Slack Integration** empowers SOC analysts by allowing them to efficiently "
      }
    },
    {
      "id": "3c56a4a9-36ac-41d3-a4ff-425b93a26341",
      "name": "Sticky Note10",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1600,
        3720
      ],
      "parameters": {
        "width": 342.34463660857455,
        "height": 106.35161810996954,
        "content": "### 📧 GDPR Warning\nThis workflow requires additional permissions from your Slack app that may not be available in your region or organization."
      }
    },
    {
      "id": "c87cdbc8-9f86-46a1-9789-7ad992b6f01d",
      "name": "Get Email From Slack to assign the task to in TheHive",
      "type": "n8n-nodes-base.slack",
      "position": [
        1700,
        3540
      ]
    },
    {
      "id": "f6e6512f-60d8-4733-833a-b88edf6c978c",
      "name": "Add a task to TheHive",
      "type": "n8n-nodes-base.theHiveProject",
      "position": [
        2280,
        3540
      ]
    },
    {
      "id": "ebcd8020-b157-4c0f-a726-80dd4864cbcf",
      "name": "Receive Button Press",
      "type": "n8n-nodes-base.webhook",
      "position": [
        360,
        880
      ]
    }
  ],
  "connections": {
    "Edit Fields": {
      "main": [
        [
          {
            "node": "Parse Message Type",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Map Actions": {
      "main": [
        [
          {
            "node": "Build Final Block",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "HTTP Request": {
      "main": [
        [
          {
            "node": "Prep Fields For Slack",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "TheHive Trigger": {
      "main": [
        [
          {
            "node": "Formatting Dictionaries",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Update Case PAP": {
      "main": [
        [
          {
            "node": "PAP Case Block Rebuild",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Update Case TLP": {
      "main": [
        [
          {
            "node": "TLP Case Block Rebuild",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Build Final Block": {
      "main": [
        [
          {
            "node": "Update Message with new Assignee",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Parse Message Type": {
      "main": [
        [
          {
            "node": "Respond to Slack with 200 response",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Acknowledge Close Case to Slack",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Acknowledge Severity Update to Slack",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Acknowledge Modal Request to Slack",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Check if Case Options",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Acknowledge PAP Update to Slack",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Acknowledge Status Update to Slack",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Acknowledge TLP Update to Slack",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Respond positive to Slack when someone clicks a link",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Receive Button Press": {
      "main": [
        [
          {
            "node": "Edit Fields",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Update Case Severity": {
      "main": [
        [
          {
            "node": "Severity Case Block Rebuild1",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Check if Case Options": {
      "main": [
        [
          {
            "node": "Close Modal with 204 response",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Respond 204 to Slack",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Prep Fields For Slack": {
      "main": [
        [
          {
            "node": "Post New Case To Slack",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "PAP Case Block Rebuild": {
      "main": [
        [
          {
            "node": "Map Actions",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "TLP Case Block Rebuild": {
      "main": [
        [
          {
            "node": "Map Actions",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Formatting Dictionaries": {
      "main": [
        [
          {
            "node": "HTTP Request",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Case Slack Block Rebuild": {
      "main": [
        [
          {
            "node": "Map Actions",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Close Case Block Rebuild": {
      "main": [
        [
          {
            "node": "Map Actions",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Update Status in TheHive": {
      "main": [
        [
          {
            "node": "Status Case Block Rebuild",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Prep Fields For PAP Slack": {
      "main": [
        [
          {
            "node": "Update Case PAP",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Prep Fields For TLP Slack": {
      "main": [
        [
          {
            "node": "Update Case TLP",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Status Case Block Rebuild": {
      "main": [
        [
          {
            "node": "Map Actions",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Close Case as False Positive": {
      "main": [
        [
          {
            "node": "Close Case Block Rebuild",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Prep Fields For Status Slack": {
      "main": [
        [
          {
            "node": "Update Status in TheHive",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Severity Case Block Rebuild1": {
      "main": [
        [
          {
            "node": "Map Actions",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Close Modal with 204 response": {
      "main": [
        [
          {
            "node": "Get Email From Slack to assign the task to in TheHive",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Prep Fields For Slack - Close": {
      "main": [
        [
          {
            "node": "Close Case as False Positive",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Prep Fields For Slack - Assign": {
      "main": [
        [
          {
            "node": "Get Slack User's Email From Slack",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Acknowledge Close Case to Slack": {
      "main": [
        [
          {
            "node": "Prep Fields For Slack - Close",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Acknowledge PAP Update to Slack": {
      "main": [
        [
          {
            "node": "Prep Fields For PAP Slack",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Acknowledge TLP Update to Slack": {
      "main": [
        [
          {
            "node": "Prep Fields For TLP Slack",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Prep Fields For Slack - Severity": {
      "main": [
        [
          {
            "node": "Update Case Severity",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get Slack User's Email From Slack": {
      "main": [
        [
          {
            "node": "Update TheHive Case with new Assignee",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Acknowledge Modal Request to Slack": {
      "main": [
        [
          {
            "node": "Task Modal",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Acknowledge Status Update to Slack": {
      "main": [
        [
          {
            "node": "Prep Fields For Status Slack",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Respond to Slack with 200 response": {
      "main": [
        [
          {
            "node": "Prep Fields For Slack - Assign",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Acknowledge Severity Update to Slack": {
      "main": [
        [
          {
            "node": "Prep Fields For Slack - Severity",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Update TheHive Case with new Assignee": {
      "main": [
        [
          {
            "node": "Case Slack Block Rebuild",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Respond positive to Slack when someone clicks a link": {
      "main": [
        [
          {
            "node": "No Action Needed",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get Email From Slack to assign the task to in TheHive": {
      "main": [
        [
          {
            "node": "Add a task to TheHive",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}