Monitor Entra ID high-risk users with Microsoft Graph, TheHive and Slack
A free n8n workflow that runs on a schedule and connects Slack and TheHive 5.
FreeOpen template
About this workflow
This free n8n automation template runs on a schedule and connects Slack and TheHive 5. Shared by Muhammad Bin Zohaib on the official n8n template gallery. Open the official template page to copy it into your own n8n account, then connect your own credentials before switching it on.
Apps and services it connects
- Slack
- TheHive 5
How to use this template
- Open the template, choose “Use for free” and import it into your n8n instance (cloud or self-hosted).
- Connect your own accounts and API keys for each app. The template never includes anyone's credentials.
- Run it once with test data, check the result, then switch it on.
The workflow itself stays on n8n's official template page. HEEEXY only describes it and links there.
More SecOps workflows
- Assess information system risks via webhook with Claude and Google Sheets: A free n8n workflow that starts when a webhook is called and connects Google Sheets and Anthropic with AI steps.
- Audit AI and search bot access using robots.txt checks and Gmail reports: A free n8n workflow that runs on a schedule and connects Gmail.
- Audit SPF, DKIM and DMARC DNS for sheet domains with Google DNS, GPT-4o-mini and Telegram: A free n8n workflow that runs on a schedule and connects Google Sheets, Telegram and OpenAI with AI steps.
- Audit security questionnaire answers with Google Sheets and Google Drive evidence: A free n8n workflow that runs on a schedule and connects Google Sheets and Slack.