Project Objective
To enhance security operations by designing and deploying a fully automated workflow that streamlines domain reputation analysis. This tool eliminates the time-consuming manual task of querying multiple threat intelligence platforms, enabling faster, more consistent, and scalable incident analysis.
How It Works
1. Dynamic Ingestion
A secure webhook endpoint receives a suspicious domain from any integrated tool or manual submission.
2. Multi-Source Enrichment
Instantly queries VirusTotal and AlienVault OTX APIs for real-time threat intelligence.
3. Actionable Reporting
Generates a consolidated HTML summary and emails the findings for immediate review.
Impact & Value
-
Massive Time Savings
Eliminates the need for an analyst to manually check domains across multiple platforms, saving valuable time during incident response.
-
Reduced Alert Fatigue
Consolidates data into one clean, unified report, making analysis quicker and reducing cognitive load on security personnel.
-
Scalable & Consistent
Ensures every domain is processed with the same consistent logic, providing reliable and scalable analysis for any number of requests.
Technologies Used
n8n
Automation
VirusTotal
Threat Intelligence
AlienVault OTX
Threat Intelligence
REST APIs
Integration
Webhooks
Data Ingestion
Gmail API
Notification