Wazuh RuleOpsX – Automatische Validierung, Bereitstellung und Verbesserung der Erkennungsfähigkeiten
Dies ist ein SecOps, Multimodal AI-Bereich Automatisierungsworkflow mit 14 Nodes. Hauptsächlich werden If, Ssh, Code, Telegram, HttpRequest und andere Nodes verwendet. Automatisiertes Deployment der Wazuh-Regel-Pipeline mit GitHub, XML-Validierung und Telegram-Alerts
- •Telegram Bot Token
- •Möglicherweise sind Ziel-API-Anmeldedaten erforderlich
- •GitHub Personal Access Token
Verwendete Nodes (14)
Kategorie
{
"id": "ycZ4TnsQsex77CYk",
"meta": {
"instanceId": "04efa85563ff59ae71f7bc1e4ed9a086a69f4130298a28a588ae58f08407702b",
"templateCredsSetupCompleted": true
},
"name": "Wazuh RuleOpsX – Auto-Validate, Deploy & Elevate Detection",
"tags": [],
"nodes": [
{
"id": "4dc3a66e-3caa-4f98-8bd0-39ac49a2c6cd",
"name": "Github Trigger",
"type": "n8n-nodes-base.githubTrigger",
"position": [
-848,
-48
],
"webhookId": "7a8eda35-c338-4421-232-86340c4a4f1c",
"parameters": {},
"typeVersion": 1
},
{
"id": "33ab571c-aed9-4713-8b3f-6b958ac24604",
"name": "Geänderte Dateien extrahieren",
"type": "n8n-nodes-base.code",
"position": [
-400,
-144
],
"parameters": {},
"typeVersion": 2
},
{
"id": "1059c81d-c8df-4823-b8f3-b5fb6196686a",
"name": "Regel herunterladen",
"type": "n8n-nodes-base.httpRequest",
"position": [
-176,
-144
],
"parameters": {},
"typeVersion": 4.2
},
{
"id": "96ab9e75-66b0-4bd5-822f-489a326ec127",
"name": "Datei hochladen",
"type": "n8n-nodes-base.ssh",
"position": [
48,
-144
],
"parameters": {},
"typeVersion": 1
},
{
"id": "46fd91e3-8b95-4cff-b93a-132b4a730295",
"name": "❌ Fehlermeldung",
"type": "n8n-nodes-base.telegram",
"position": [
1392,
-144
],
"webhookId": "fd7c2740-b855-4890-815b-6f48dfd86dd0",
"parameters": {},
"typeVersion": 1.2
},
{
"id": "aacc31f6-4b99-48f0-96bf-8a22243f9a06",
"name": "✅ Erfolgsmeldung",
"type": "n8n-nodes-base.telegram",
"position": [
1392,
-336
],
"webhookId": "e7e69fdc-49d8-4160-aa95-62fc69f5ad5b",
"parameters": {},
"typeVersion": 1.2
},
{
"id": "0c078ecb-0155-4682-bb26-72ec53dcc2c2",
"name": "Wazuh_manager neu starten",
"type": "n8n-nodes-base.ssh",
"position": [
944,
-240
],
"parameters": {},
"typeVersion": 1
},
{
"id": "dc1a2dd9-042b-4a48-b888-a4c191d135b9",
"name": "Regeln bereitstellen",
"type": "n8n-nodes-base.ssh",
"position": [
720,
-240
],
"parameters": {},
"typeVersion": 1
},
{
"id": "6dc9b783-45ab-4dfd-a09a-bf1d6a7db54a",
"name": "Regelvalidierung",
"type": "n8n-nodes-base.ssh",
"position": [
272,
-144
],
"parameters": {},
"typeVersion": 1
},
{
"id": "405115db-ece3-4bfd-bc69-4f942322322a130",
"name": "Regelbereitstellung fehlgeschlagen",
"type": "n8n-nodes-base.telegram",
"position": [
720,
-48
],
"webhookId": "de6c1056-9aea-41ab-98df-b9269ba8d77f",
"parameters": {},
"typeVersion": 1.2
},
{
"id": "d64b8fa3-ffa7-4437-a8af-4e8476cf01c8",
"name": "Keine Operation, nichts tun",
"type": "n8n-nodes-base.noOp",
"position": [
-400,
48
],
"parameters": {},
"typeVersion": 1
},
{
"id": "f2cb2437-2703-499f-aebf-bbeaccc3b290",
"name": "Gültiger Commit für Bereitstellung",
"type": "n8n-nodes-base.if",
"position": [
-624,
-48
],
"parameters": {},
"typeVersion": 2.2
},
{
"id": "f9ec8d14-25a7-483f-b879-781e70b89d80",
"name": "Regelvalidierungsprüfung",
"type": "n8n-nodes-base.if",
"position": [
496,
-144
],
"parameters": {},
"typeVersion": 2.2
},
{
"id": "6db2dc61-776a-4fb8-9c78-2c4b54e9b1ea",
"name": "Abschließende Bestätigungsprüfung",
"type": "n8n-nodes-base.if",
"position": [
1168,
-240
],
"parameters": {},
"typeVersion": 2.2
}
],
"active": false,
"pinData": {},
"settings": {
"executionOrder": "v1"
},
"versionId": "348e2496-9d89-4395-9e3c-e6f3e640ffd6",
"connections": {
"1059c81d-c8df-4823-b8f3-b5fb6196686a": {
"main": [
[
{
"node": "96ab9e75-66b0-4bd5-822f-489a326ec127",
"type": "main",
"index": 0
}
]
]
},
"96ab9e75-66b0-4bd5-822f-489a326ec127": {
"main": [
[
{
"node": "6dc9b783-45ab-4dfd-a09a-bf1d6a7db54a",
"type": "main",
"index": 0
}
]
]
},
"4dc3a66e-3caa-4f98-8bd0-39ac49a2c6cd": {
"main": [
[
{
"node": "f2cb2437-2703-499f-aebf-bbeaccc3b290",
"type": "main",
"index": 0
}
]
]
},
"6dc9b783-45ab-4dfd-a09a-bf1d6a7db54a": {
"main": [
[
{
"node": "f9ec8d14-25a7-483f-b879-781e70b89d80",
"type": "main",
"index": 0
}
]
]
},
"dc1a2dd9-042b-4a48-b888-a4c191d135b9": {
"main": [
[
{
"node": "0c078ecb-0155-4682-bb26-72ec53dcc2c2",
"type": "main",
"index": 0
}
]
]
},
"33ab571c-aed9-4713-8b3f-6b958ac24604": {
"main": [
[
{
"node": "1059c81d-c8df-4823-b8f3-b5fb6196686a",
"type": "main",
"index": 0
}
]
]
},
"0c078ecb-0155-4682-bb26-72ec53dcc2c2": {
"main": [
[
{
"node": "6db2dc61-776a-4fb8-9c78-2c4b54e9b1ea",
"type": "main",
"index": 0
}
]
]
},
"f9ec8d14-25a7-483f-b879-781e70b89d80": {
"main": [
[
{
"node": "dc1a2dd9-042b-4a48-b888-a4c191d135b9",
"type": "main",
"index": 0
}
],
[
{
"node": "405115db-ece3-4bfd-bc69-4f942322322a130",
"type": "main",
"index": 0
}
]
]
},
"6db2dc61-776a-4fb8-9c78-2c4b54e9b1ea": {
"main": [
[
{
"node": "aacc31f6-4b99-48f0-96bf-8a22243f9a06",
"type": "main",
"index": 0
}
],
[
{
"node": "46fd91e3-8b95-4cff-b93a-132b4a730295",
"type": "main",
"index": 0
}
]
]
},
"f2cb2437-2703-499f-aebf-bbeaccc3b290": {
"main": [
[
{
"node": "33ab571c-aed9-4713-8b3f-6b958ac24604",
"type": "main",
"index": 0
}
],
[
{
"node": "d64b8fa3-ffa7-4437-a8af-4e8476cf01c8",
"type": "main",
"index": 0
}
]
]
}
}
}Wie verwende ich diesen Workflow?
Kopieren Sie den obigen JSON-Code, erstellen Sie einen neuen Workflow in Ihrer n8n-Instanz und wählen Sie "Aus JSON importieren". Fügen Sie die Konfiguration ein und passen Sie die Anmeldedaten nach Bedarf an.
Für welche Szenarien ist dieser Workflow geeignet?
Fortgeschritten - Sicherheitsbetrieb, Multimodales KI
Ist es kostenpflichtig?
Dieser Workflow ist völlig kostenlos. Beachten Sie jedoch, dass Drittanbieterdienste (wie OpenAI API), die im Workflow verwendet werden, möglicherweise kostenpflichtig sind.
Verwandte Workflows
mariskarthick
@mariskarthickAn Open-source enthusiast driving next-gen Detection Engineering, Threat Hunting, and SOC Automation — turning ideas into tools that empower security teams to detect and respond faster than ever.
Diesen Workflow teilen