Trigger IP/URL threat analysis via webhook: NixGuard &

This automation acts as a dispatcher for initiating cyber threat analysis workflows. It enables centralized triggering of IP and URL checks via NixGuard and Wazuh based on external events (webhooks) or manual input. Seamlessly integrates with SOC and SOAR processes to accelerate risk assessment.

## Who it´s for
- Cybersecurity specialists automating threat analysis
- SOC analysts using SIEM systems like Wazuh
- DevOps engineers implementing SOAR solutions
- Incident response (IR) teams requiring rapid risk evaluation


## What the automation does
- Accepts suspicious IP or URL data via HTTP webhook or manual trigger
- Passes parameters and API key to the core workflow for analysis initiation
- Uses NixGuard for threat detection and AI-powered summaries
- Integrates with Wazuh for event correlation and enriched context
- Formats results and forwards them to Slack or other alerting systems
- Supports both automated and manual execution modes

## What´s included
- Ready-to-use n8n workflow
- Logic for handling webhooks and manual triggers
- Integrations with NixGuard, Wazuh, Slack, and HTTP Webhook
- Basic textual guide for adaptation and deployment

## Requirements for setup
- n8n account with workflow creation access
- NixGuard API access (valid API key)
- Configured Wazuh environment capable of integration
- Optionally: Slack account for alert notifications

## Benefits and outcomes
- Faster incident response through automated analysis initiation
- Centralized control over threat checks from multiple sources
- Reduced analyst workload via automatic data processing
- Compatibility with existing SOC processes and monitoring tools
- Flexibility: supports standalone and triggered execution scenarios

## Important: template only
Important: you are purchasing a ready-made automation workflow template only. Rollout into your infrastructure, connecting specific accounts and services, 1:1 setup help, custom adjustments for non-standard stacks and any consulting support are provided as a separate paid service at an individual rate. To discuss custom work or 1:1 help, contact via Telegram: @gleb923.