ES | EN
IT Ops

Notify User in Slack of Quarantined Email and Create Jira Ticket if Opened

SlackJira
Nodes 4
Complexity Intermediate
Category IT Ops
n8n popularity 1,812 views in n8n library

This n8n workflow serves as an incident response and notification system for handling potentially malicious emails flagged by Sublime Security. It begins with a Webhook trigger that Sublime Security uses to initiate the workflow by POSTing an alert. The workflow then extracts message details from Sublime Security using an HTTP Request node, based on the provided messageId, and subsequently splits into two parallel paths. In the first path, the workflow looks up a Slack user by email, aiming to find the recipient of the email that triggered the alert. If a user is found in Slack, a notification is sent to them, explaining that they have received a potentially malicious email that has been quarantined and is under investigation. This notification includes details such as the email's subject and sender. The second path checks whether the flagged email has been opened by inspecting the read_at value from Sublime Security. If the email was opened, the workflow prepares a table summarizing

Apps and nodes included

⚡ Open and edit in Scriflow ← Browse all n8n templates

Scriflow builds and adapts n8n workflows with AI. Open this template in the editor to get the import-ready JSON.