Templates / Auto-classify security incidents with GPT-4 and Google Sheets for SOC teams

Auto-classify security incidents with GPT-4 and Google Sheets for SOC teams

Ready for 3.0

by Adnan Tariq ✓ · 181 views · created 2025-07-25 · SecOps, AI Summarization

Ready for 3.0. This template uses no nodes that n8n 3.0 removes. No removed nodes, versions or helpers found. Static check, last run 2026-10-19.

What this workflow does

This workflow has 5 nodes and runs on a schedule (every day). Along the way it connects Google Sheets.

How it runs

Trigger: On a schedule (every day).

Google Sheets: uses Google Sheets
🧠 Classify Incident (GPT) (HTTP Request): calls an HTTP API
✏️ Format Tags (Edit Fields (Set)): sets or maps fields
Google Sheets: uses Google Sheets

Services it uses

Google Sheets

Before you upgrade to n8n 3.0

Nothing in this workflow is removed in n8n 3.0, so it should import and run after the upgrade.

Nodes used (4)

Edit Fields (Set)n8n-nodes-base.set
Google Sheetsn8n-nodes-base.googleSheets
HTTP Requestn8n-nodes-base.httpRequest
Schedule Triggern8n-nodes-base.scheduleTrigger

From the author

👤 Who it’s for Blue Team leads, SOC analysts, and IT responders looking to automatically classify security alerts using AI-driven logic and asset-based risk signals. Ideal for teams already scoring threats via CyberScan or BlueOps Module 3, and needing to…
Excerpt from Adnan Tariq's description on n8n.io.

View the original on n8n.io → Check your own copy

Auto-classify security incidents with GPT-4 and Google Sheets for SOC teams

What this workflow does

How it runs

Services it uses

Before you upgrade to n8n 3.0

Nodes used (4)

From the author

Get the weekly “what broke” email