Tagged: n8n
2 posts · browse all tags
-
Enrichment Has to Come First: Adding IOC Lookups to the n8n Alert Router
Extending the Wazuh-to-chat n8n pipeline with an AbuseIPDB enrichment step ahead of the threshold decision — plus a real, source-level dig into why n8n's workflow static data silently stopped persisting inside the Code node's newer isolated-vm sandbox.
-
Alert Fatigue Is a Routing Problem: A Wazuh-to-Chat Pipeline in n8n
A noisy SIEM is its own security problem — the fix isn't more alerts, it's better routing. Building and testing a Wazuh-to-chat pipeline in n8n, and two real bugs the build itself turned up.