Automation library · Integrations

Analyze emails

Started by an arriving email, and works across Email. 15 steps, 1 branch, 1 loop or waits: a working afternoon to understand properly.

Medium

Download free
15 stepsMedium: a working afternoon
1Branch: places the flow splits
1Loop or waits
1Service it connects to

The flow

Logic 2Service 13

The steps in the order they run, from what starts it.

  1. 1IMAP EmailEmail Read ImapService
  2. 2TheHiveThe HiveService
  3. 3Create CaseThe HiveService
  4. 4CaseThe HiveService
  5. 5WaitWaitLogic
  6. 6ObservableThe HiveService
  7. 7Analyzer EmailThe HiveService
  8. 8CortexCortexService
  9. 9IFIfLogic
  10. 10Update Case DomainThe HiveService
  11. 11Update Case EmailThe HiveService
  12. 12Update Case IpThe HiveService
  13. 13OTX DOMAINThe HiveService
  14. 14Email ReputationThe HiveService
  15. 15OTX IPThe HiveService

How it's built

Starts on
An arriving email
Steps
15, with 1 branch, 1 loop or waits
Size
Medium: a working afternoon
Connects to
Email
Model
None. This is plumbing, not judgement

Questions

What does it need to run?

An n8n account, plus your own Email account. You connect your own accounts after importing it; none are included.

What starts it?

It starts on an arriving email.

Does it use AI?

No. Every step is fixed logic or a call to a service, so it does the same thing every time.

How long does it take to set up?

Plan an afternoon. 15 steps is enough that you should read each one before running it.

How do I import it?

Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.

Before you run it

Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 15 steps before you point it at anything that matters.