Configured with Cortex, Email Read Imap, The Hive, Wait. Review the connections and setup before adapting this template.
Node categories in this workflow
- Messaging
- Integration
- Routing
- Wait
Icons describe general node roles, inferred from node types. Inspect the parameters for the configured action.
Drag to pan; use + and − to zoom. Reconstructed from the exported node positions; nothing runs here. Dashed lines represent non-main connections. Full node names and notes appear below.
How it works
The exported workflow contains the following configured nodes. Their connections are shown above; inspect the JSON for the complete logic, expressions, and external actions.
| Node | Category | Type | Operation |
|---|---|---|---|
| IMAP Email | Messaging | Email Read Imap | See node parameters |
| TheHive | Integration | The Hive | See node parameters |
| Create Case | Integration | The Hive | promote |
| Case | Integration | The Hive | case / get |
| Observable | Integration | The Hive | observable |
| Analyzer Email | Integration | The Hive | observable / executeAnalyzer |
| Cortex | Integration | Cortex | job / report |
| IF | Routing | If | See node parameters |
| Update Case Domain | Integration | The Hive | observable / create |
| Update Case Email | Integration | The Hive | observable / create |
| Update Case Ip | Integration | The Hive | observable / create |
| Wait | Wait | Wait | See node parameters |
| Email Reputation | Integration | The Hive | observable / executeAnalyzer |
| OTX IP | Integration | The Hive | observable / executeAnalyzer |
| OTX DOMAIN | Integration | The Hive | observable / executeAnalyzer |
Setup
- Download the JSON and import it into an isolated n8n instance. Leave the workflow inactive.
- Connect your own credentials through n8n’s credential store. Replace
REPLACE_WITH_*values with your resource identifiers. - Inspect API destinations, Code nodes, database queries, file paths, and outbound actions.
- Run with synthetic data and harmless destinations. Enable triggers only after checking the actual outputs.
Requirements
An n8n instance with the listed node types and compatible versions. Service-connected workflows may require accounts, credentials, or paid APIs.
Credential types declared in the source
cortexApiimaptheHiveApi
Workflow notes
Purpose and structure
This folder contains the Email workflow. Its executable nodes use cortex, emailReadImap, if, theHive, wait. The table and connection map below are derived from the JSON, not an inferred guarantee of behavior.
Setup
Import inactive. Configure your own credentials and replace REPLACE_WITH_* values. Review external destinations and Code nodes before running.
Entry points
Inspect connections; no recognized trigger.
Verification
Sanitized source candidate; not runtime-tested. This overview is generated from node metadata. Read the folder README for the connection map, credential types, and license.
Attribution
https://github.com/Zie619/n8n-workflows/blob/94007c1445d9258a7da116646b79473e7c7c3282/workflows/Cortex/0972_Cortex_Emailreadimap_Send.json MIT; preserve source notices.