Process Sophos threats: VirusTotal checks, AI analysis,

This automation template enables rapid analysis and response to security incidents. It receives events from Sophos via webhook, filters critical threats, checks indicators of compromise against VirusTotal, and uses Google Gemini AI to generate clear, structured reports delivered directly to Telegram. Helps security teams reduce manual workload and respond faster to emerging threats.

## Who it´s for
- SOC analysts handling information security incidents
- IT administrators using Sophos for network protection
- Cybersecurity teams in small and medium businesses
- Analysts who need fast AI-powered threat assessment

## What the automation does
- Receives a webhook from Sophos upon a security event
- Filters events by severity and threat type
- Extracts an indicator of compromise (IP, domain, or hash)
- Checks the indicator´s reputation via VirusTotal API
- Triggers Google Gemini AI to generate summary, risk level, and mitigation steps
- Sends structured alert to Telegram

## What´s included
- Ready-to-use n8n workflow
- Trigger and event handling logic
- Integrations with Sophos, VirusTotal, Telegram, and Google Gemini
- Basic text instructions for launch and adaptation

## Requirements for setup
- n8n instance (self-hosted or cloud)
- Sophos account with webhook configuration access
- VirusTotal API key
- Telegram bot and chat/user ID for notifications
- Google Gemini API key

## Benefits and outcomes
- Reduced incident response time
- Automated initial threat analysis
- Elimination of manual report formatting
- Centralized alerts in messaging app
- AI-powered decision support
- Lower analyst workload
- Consistent alert processing

## Important: template only
Important: you are purchasing a ready-made automation workflow template only. Rollout into your infrastructure, connecting specific accounts and services, 1:1 setup help, custom adjustments for non-standard stacks and any consulting support are provided as a separate paid service at an individual rate. To discuss custom work or 1:1 help, contact via Telegram: @gleb923.