{
  "name": "Notify user in Slack of quarantined email and create Jira ticket if opened",
  "nodes": [
    {
      "id": "f0bf5f9b-58c5-4dff-95cc-3af378fc49a3",
      "name": "has email been opened?",
      "type": "n8n-nodes-base.if",
      "position": [
        1280,
        1040
      ]
    },
    {
      "id": "7acb2409-6b67-4500-993f-5beeaecec718",
      "name": "Receive Sublime Security Alert",
      "type": "n8n-nodes-base.webhook",
      "position": [
        840,
        1040
      ]
    },
    {
      "id": "ad876000-e3a4-4f3e-b917-629cc450a15c",
      "name": "Get message details in Sublime Security",
      "type": "n8n-nodes-base.httpRequest",
      "position": [
        1040,
        1040
      ]
    },
    {
      "id": "2945cdef-f595-410d-9344-767e8cae3cd6",
      "name": "Jira Software",
      "type": "n8n-nodes-base.jira",
      "position": [
        1680,
        900
      ]
    },
    {
      "id": "9c55d492-0fdd-4edd-995c-b3c5fecd9840",
      "name": "lookup slack user by email",
      "type": "n8n-nodes-base.httpRequest",
      "position": [
        1280,
        460
      ]
    },
    {
      "id": "f1bcb2c7-4ef4-4f9b-a68e-6620ab66b435",
      "name": "user found?",
      "type": "n8n-nodes-base.if",
      "position": [
        1480,
        460
      ]
    },
    {
      "id": "dcca54b8-d09c-45bf-a789-7545103bb7c3",
      "name": "Sticky Note",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        480,
        364.84681758846136
      ],
      "parameters": {
        "width": 718.6188455173532,
        "height": 863.9601939404693,
        "content": "![Sublime Security](https://i.imgur.com/DfXJLIw.png)\n# Workflow Overview\n\nThis workflow is initiated by `Sublime Security` whenever an inbound email undergoes scanning and triggers an alert.\n\nIn the e"
      }
    },
    {
      "id": "8255a3f7-fcda-4d93-97c3-4d223778014f",
      "name": "Sticky Note3",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1220,
        175.18665303995851
      ],
      "parameters": {
        "width": 714.4547337311393,
        "height": 522.7074838611178,
        "content": "![Slack](https://i.imgur.com/iKyMV0N.png)\n## Try to find quarantined email user's slack username \nWith the quarantined email’s details at hand, n8n tries to notify the user via Slack. The message expl"
      }
    },
    {
      "id": "c149a4b8-4f12-4018-a1dc-dfbed9e081eb",
      "name": "Found, notify user",
      "type": "n8n-nodes-base.slack",
      "position": [
        1700,
        400
      ]
    },
    {
      "id": "04712fdf-0409-4f9d-bd0b-7e40af9ffade",
      "name": "Not Found, Do Nothing",
      "type": "n8n-nodes-base.noOp",
      "position": [
        1700,
        560
      ]
    },
    {
      "id": "c9f8ede6-1886-4779-a4e8-3c32e12d6aae",
      "name": "Sticky Note1",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        1220,
        710.6363009271314
      ],
      "parameters": {
        "width": 718.1630306649816,
        "height": 516.9144812801944,
        "content": "![Jira](https://upload.wikimedia.org/wikipedia/commons/thumb/8/82/Jira_%28Software%29_logo.svg/320px-Jira_%28Software%29_logo.svg.png)\n## If user opened email before quarantine, create jira ticket\nIf "
      }
    },
    {
      "id": "a75d35a2-eefa-490c-9a05-9474a1e093fb",
      "name": "No, do nothing",
      "type": "n8n-nodes-base.noOp",
      "position": [
        1500,
        1080
      ]
    },
    {
      "id": "8c44c4fb-ec26-4005-b17b-ac8a9ef79721",
      "name": "Yes, prep flaggedRules table",
      "type": "n8n-nodes-base.code",
      "position": [
        1500,
        900
      ]
    }
  ],
  "connections": {
    "user found?": {
      "main": [
        [
          {
            "node": "Found, notify user",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "Not Found, Do Nothing",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "has email been opened?": {
      "main": [
        [
          {
            "node": "Yes, prep flaggedRules table",
            "type": "main",
            "index": 0
          }
        ],
        [
          {
            "node": "No, do nothing",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "lookup slack user by email": {
      "main": [
        [
          {
            "node": "user found?",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Yes, prep flaggedRules table": {
      "main": [
        [
          {
            "node": "Jira Software",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Receive Sublime Security Alert": {
      "main": [
        [
          {
            "node": "Get message details in Sublime Security",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "Get message details in Sublime Security": {
      "main": [
        [
          {
            "node": "has email been opened?",
            "type": "main",
            "index": 0
          },
          {
            "node": "lookup slack user by email",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}