The flow
Starts it 1Model 3Logic 3Service 3
The steps in the order they run, from what starts it.
- 1Schedule Trigger - Every 6 HoursSchedule triggerStarts it
- 2Parse Security Analysis ResultsOutput Parser StructuredModel
- 3OpenAI GPT-4 Mini ModelLm Chat Open AiModel
- 4Configuration - User SettingsSetLogic
- 5AI Security AnalysisChain LlmModel
- 6SSH - Gather Process and Network DataSshService
- 7Check for Malicious ActivityIfLogic
- 8Check for Suspicious ActivityIfLogic
- 9Send Malicious Activity AlertTelegramService
- 10Send Suspicious Activity NoticeTelegramService
How it's built
- Starts on
- A clock
- Steps
- 10, with 2 branches
- Size
- Medium: a working afternoon
- Connects to
- Telegram
- Model
- OpenAI
Questions
What does it need to run?
An n8n account, plus your own Telegram account, and a key for OpenAI. You connect your own accounts after importing it; none are included.
What starts it?
It starts on a clock.
Does it use AI?
Yes. It calls OpenAI. Model calls are billed by the provider, not by n8n.
How long does it take to set up?
Plan an afternoon. 10 steps is enough that you should read each one before running it.
How do I import it?
Copy the workflow, open a new workflow in n8n and paste. The steps appear on the canvas, ready for your own accounts.
Nothing here has been tested by us. It is somebody's working automation, read and described from its own steps. Treat the connections it wants as a list of accounts it will touch, and read the 10 steps before you point it at anything that matters.