I Made a Custom Threat Intel Feed (Connecting Apps with n8n)
Source: YouTube · John Hammond · published Feb 1, 2024 · 21:29
The video demonstrates how to create an automated phishing threat intelligence feed using n8n that pulls phishing websites from VirusTotal, analyzes them with URLscan, and sends screenshots to Slack 0:00.
Key Takeaways:
• n8n is an open-source workflow automation tool with over 400 integrations that can connect different services without extensive coding 0:45
• The workflow can be set to run on a schedule, automatically querying VirusTotal for the latest phishing websites 6:33
• Using VirusTotal's API, the system searches for phishing URLs with simple query parameters 8:01
• URLs are submitted to URLscan for analysis and screenshots, with built-in error handling for failed requests 10:27
• Results are sent to Slack using the block builder to display screenshots of identified phishing sites 14:33
This automation showcases how n8n can connect security tools to create powerful threat intelligence feeds with minimal coding effort 19:01.
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
I created an automated thread intelligence feed that will pull the latest fishing websites from virus total upload them to URL scan and then grab pictures of the website and send them to me within slack and I barely had to write any code in this video I'm going to show you how because you know I've been thinking a lot about automation recently I've been trying to think of how can I automate or abstract away a lot of the tedious stuff that takes a lot of orchestration and coordination between multiple different apps How can I autom different parts of my life different parts of my work and especially one that I'm really interested in is security research because we have so many different services and sandboxes so many tools in the toolkit but how could we put them together so I want to show …