n8n Operations Pack (Slack) — 4 Workflows

This pack of four n8n workflows connects Slack with TheHive to streamline security operations. It enables SOC teams to manage TheHive cases directly from Slack without switching apps. Workflows include: a bot that posts new TheHive case notifications to Slack; automation for creating, updating, and retrieving cases in TheHive; a webhook integration that sends Slack notifications when TheHive cases change; and a Slack bot that allows updating assignees, severity, status, adding tasks, and closing cases. Together, these workflows reduce context switching by bringing case management actions into Slack, while also keeping the team informed of case activity in real time. All workflows are customizable and importable into n8n.

SOC analysts, incident response teams, and security operations managers who use TheHive for case management and Slack for communication. These workflows are designed for teams that want to reduce tool switching and handle case updates, notifications, and task management directly within Slack.