AutomationFlows β€Ί Data & Sheets β€Ί Cyberpulse AI Blueops: Asset Enrichment Engine

Cyberpulse AI Blueops: Asset Enrichment Engine

ByAdnan Tariq @adnantariqβœ“ on n8n.io

πŸ‘€ Who it’s for Blue teamers, SOC operators, cyber analysts, and SME defenders who want to automatically enrich daily CVE/IOC threats by matching them to their internal asset database. Ideal for compliance-driven teams (NIST CSF, Essential Eight) seeking automated enrichment and…

Cron / scheduled triggerβ˜…β˜…β˜…β˜…β˜† complexity10 nodesGoogle SheetsEmail Send
Data & Sheets Trigger: Cron / scheduled Nodes: 10 Complexity: β˜…β˜…β˜…β˜…β˜† Added:

This workflow corresponds to n8n.io template #6410 β€” we link there as the canonical source.

This workflow follows the Emailsend β†’ Google Sheets recipe pattern β€” see all workflows that pair these two integrations.

The workflow JSON

Copy or download the full n8n JSON below. Paste it into a new n8n workflow, add your credentials, activate. Full import guide β†’

Download .json
{
  "id": "FulCIypj42nIklCO",
  "name": "M2 - Asset Enrichment Engine",
  "tags": [],
  "nodes": [
    {
      "id": "14a7268a-be41-4a5a-a5cb-9727b1f6d814",
      "name": "Merge",
      "type": "n8n-nodes-base.merge",
      "position": [
        100,
        240
      ],
      "parameters": {},
      "typeVersion": 3.1
    },
    {
      "id": "5baea5d2-c41f-4eb1-868a-2307e2b931c2",
      "name": "\ud83d\udd01 Daily Trigger",
      "type": "n8n-nodes-base.cron",
      "position": [
        -420,
        240
      ],
      "parameters": {},
      "typeVersion": 1
    },
    {
      "id": "dabf2c97-d177-4cda-9103-df589a0f3e66",
      "name": "\ud83e\udde0Match Threats to Assets",
      "type": "n8n-nodes-base.function",
      "position": [
        320,
        240
      ],
      "parameters": {},
      "executeOnce": true,
      "typeVersion": 1,
      "alwaysOutputData": true
    },
    {
      "id": "e370d6aa-be47-47a3-8a58-186dc5db4d6c",
      "name": "\ud83d\udcca Apend New Threat",
      "type": "n8n-nodes-base.googleSheets",
      "position": [
        560,
        240
      ],
      "parameters": {},
      "typeVersion": 4.5
    },
    {
      "id": "a1e771b7-6f18-4b7e-a1bb-49139dee5c75",
      "name": "\ud83d\udcca Delete Row",
      "type": "n8n-nodes-base.googleSheets",
      "position": [
        560,
        420
      ],
      "parameters": {},
      "typeVersion": 4.5
    },
    {
      "id": "621cf885-f05e-4fc3-9189-bfffe9a4f547",
      "name": "\ud83d\udcecSend Summary Email",
      "type": "n8n-nodes-base.emailSend",
      "position": [
        560,
        80
      ],
      "parameters": {},
      "typeVersion": 1
    },
    {
      "id": "700a7223-bfde-4a69-bbb4-e94999bcf444",
      "name": "\ud83d\uddc3\ufe0f  Archived_Threats",
      "type": "n8n-nodes-base.googleSheets",
      "position": [
        740,
        240
      ],
      "parameters": {},
      "typeVersion": 4.5
    },
    {
      "id": "a468d0cf-47c8-4604-8500-3ee66620f218",
      "name": "\ud83d\udccaThreats Sheets",
      "type": "n8n-nodes-base.googleSheets",
      "position": [
        -200,
        160
      ],
      "parameters": {},
      "typeVersion": 4.5
    },
    {
      "id": "fbe3a884-9151-44ca-92d4-7e44593f6c48",
      "name": "\ud83d\udccaLoad Asset DB",
      "type": "n8n-nodes-base.googleSheets",
      "position": [
        -200,
        360
      ],
      "parameters": {},
      "typeVersion": 1
    },
    {
      "id": "a585c636-aec5-4b50-8f1c-68ad28b67ffa",
      "name": "Sticky Note",
      "type": "n8n-nodes-base.stickyNote",
      "position": [
        0,
        0
      ],
      "parameters": {
        "content": ""
      },
      "typeVersion": 1
    }
  ],
  "active": false,
  "settings": {
    "executionOrder": "v1"
  },
  "versionId": "1b243f06-2e22-46c7-a269-65b35fe3cbd4",
  "connections": {
    "Merge": {
      "main": [
        [
          {
            "node": "\ud83e\udde0Match Threats to Assets",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "\ud83d\udccaLoad Asset DB": {
      "main": [
        [
          {
            "node": "Merge",
            "type": "main",
            "index": 1
          }
        ]
      ]
    },
    "\ud83d\udccaThreats Sheets": {
      "main": [
        [
          {
            "node": "\ud83d\udccaLoad Asset DB",
            "type": "main",
            "index": 0
          },
          {
            "node": "Merge",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "\ud83d\udd01 Daily Trigger": {
      "main": [
        [
          {
            "node": "\ud83d\udccaThreats Sheets",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "\ud83d\udcca Apend New Threat": {
      "main": [
        [
          {
            "node": "\ud83d\uddc3\ufe0f  Archived_Threats",
            "type": "main",
            "index": 0
          }
        ]
      ]
    },
    "\ud83e\udde0Match Threats to Assets": {
      "main": [
        [
          {
            "node": "\ud83d\udcecSend Summary Email",
            "type": "main",
            "index": 0
          },
          {
            "node": "\ud83d\udcca Apend New Threat",
            "type": "main",
            "index": 0
          },
          {
            "node": "\ud83d\udcca Delete Row",
            "type": "main",
            "index": 0
          }
        ]
      ]
    }
  }
}
Pro

For the full experience including quality scoring and batch install features for each workflow upgrade to Pro

About this workflow

πŸ‘€ Who it’s for Blue teamers, SOC operators, cyber analysts, and SME defenders who want to automatically enrich daily CVE/IOC threats by matching them to their internal asset database. Ideal for compliance-driven teams (NIST CSF, Essential Eight) seeking automated enrichment and…

Source: https://n8n.io/workflows/6410/ β€” original creator credit. Request a take-down β†’

More Data & Sheets workflows β†’ Β· Browse all categories β†’

Related workflows

Workflows that share integrations, category, or trigger type with this one. All free to copy and import.

Data & Sheets

Security teams, DevOps engineers, vulnerability analysts, and automation builders who want to eliminate repetitive Nessus scan parsing, AI-based risk triage, and manual reporting. Designed for orgs fo

Email Send, HTTP Request, Google Sheets +1
Data & Sheets

This workflow fully automates the reconciliation process between your Local Database transactions and Payment Gateway transactions. It compares both data sources, identifies mismatches, categorizes di

Google Sheets, Email Send
Data & Sheets

This n8n workflow automatically finds apartments for rent in Germany, filters them by your city, rent budget, and number of rooms, and applies to them via email. Each application includes: A personali

HTTP Request, Google Drive, Email Send +1
Data & Sheets

πŸ‘€ Who it’s for Blue Team leads, CISOs, and SOC managers who want automated visibility into threat metrics, endpoint alerts, and response actions β€” without needing a full SIEM or BI platform.

HTTP Request, Email Send, Google Sheets
Data & Sheets

Workflow Overview Zoom Attendance Evaluator with Follow-up is an n8n automation workflow that automatically evaluates Zoom meeting attendance and sends follow-up emails to no-shows and early leavers w

Zoom, Item Lists, HTTP Request +3