CYBERPULSE AI BlueOps: asset enrichment engine
Needs changesNeeds changes. This template uses 2 thing(s) that n8n 3.0 removes: Cron, Function (legacy). 2 breaking item(s) found. Static check, last run 2026-10-19.
What this workflow does
This workflow has 9 nodes and runs on a schedule (legacy Cron node). Along the way it connects Google Sheets.
How it runs
Trigger: On a schedule (legacy Cron node).
- 📊Threats Sheets (Google Sheets): uses Google Sheets
- 📊Load Asset DB (Google Sheets): uses Google Sheets
- Merge: merges the data from its input branches
- 🧠Match Threats to Assets (Function): runs custom JavaScript (legacy Function node)
- 📬Send Summary Email (Send Email): sends an email over SMTP
- 📊 Apend New Threat (Google Sheets): uses Google Sheets
- 📊 Delete Row (Google Sheets): uses Google Sheets
- 🗃️ Archived_Threats (Google Sheets): uses Google Sheets
Services it uses
Before you upgrade to n8n 3.0
2 things in this workflow are removed in n8n 3.0. Fix them before you upgrade:
- Cron in 🔁 Daily Trigger: replace with Schedule Trigger.
- Function (legacy) in 🧠Match Threats to Assets: replace with Code node, mode 'Run Once for All Items'.
Rather not rewrite it? Many of these flows can be rebuilt in Make (free plan).
| Removed in 3.0 | Replace with |
|---|---|
| Cron 🔁 Daily Trigger | Schedule Trigger |
| Function (legacy) 🧠Match Threats to Assets | Code node, mode 'Run Once for All Items' |
Nodes used (5)
- Merge
n8n-nodes-base.merge - Cron
n8n-nodes-base.cron - Function
n8n-nodes-base.function - Google Sheets
n8n-nodes-base.googleSheets - Send Email
n8n-nodes-base.emailSend
From the author
👤 Who it’s for Blue teamers, SOC operators, cyber analysts, and SME defenders who want to automatically enrich daily CVE/IOC threats by matching them to their internal asset database. Ideal for compliance-driven teams (NIST CSF, Essential Eight) seeking…