Automate Endpoint Infection Remediation with Wazuh, ClamAV, and GPT-4
Streamline the process of detecting and remediating endpoint infections by automating antivirus scans and notifications immediately after high-severity Wazuh alerts.
This workflow is designed to enhance security operations by automating the response to malware alerts. Upon receiving a high-severity alert from Wazuh, the workflow uses GPT-4 to generate a concise summary and extract the infected file path. It then initiates a ClamAV scan on the affected endpoint via SSH and sends the results to stakeholders through Telegram. This ensures rapid and consistent remediation actions, reducing manual intervention and threat dwell time.
- Platform
- n8n
- Category
- Development & IT
- Price
- $9.99
- Creator
- Sana Malik
- if
- ssh
- noOp
- webhook
- telegram
- agent
- lmChatOpenAi
- chainSummarization
How to import this workflow into n8n
- 1Purchase or download the workflow to get the n8n workflow JSON file.
- 2In your n8n instance, open Workflows and choose "Import from File" (or paste the JSON with Ctrl+V on the canvas).
- 3Open each node marked with a credential warning and connect your own accounts and API keys.
- 4Run the workflow once manually to verify the data flow, then toggle it to Active.
Related Development & IT workflows
- Create daily historical AI videos with Gemini, fal.ai, Telegram and YouTube$14.99
- Advanced multi-agent AI personal assistant with 250+ task capabilities (WhatsApp + GPT)$2.99
- Send Organized Security CVE Digests from NVD with AI-Polished Summaries to Gmail$4.99
- Learn n8n basics in 3 easy steps ✨$14.99
- Automated multi-platform sales agent with RAG, CRM & payment processing$2.99
- Version Control n8n Workflows in GitLab with Custom and Organization$14.99
More from Sana Malik
Need this deployed? We'll set it up for you.
Our automation experts deploy this workflow in your stack, connect your accounts, and verify it works — or build a custom solution from scratch.