In n8n, click the "Add workflow" button in the Workflows tab to create a new workflow. Add the starting point – a trigger on when your workflow should run: an app event, a schedule, a webhook call, another workflow, an AI chat, or a manual trigger. Sometimes, the HTTP Request node might already serve as your starting point.
Create custom CrowdStrike and Nyckel workflows by choosing triggers and actions. Nodes come with global operations and settings, as well as app-specific parameters that can be configured. You can also use the HTTP Request node to query data from any app or service with a REST API.
GetDeviceDetails
Retrieve device details for a specific host.
QueryDevicesByFilter
Query devices by filter.
PerformDeviceAction
Perform a device action such as 'Contain' or 'Lift Containment'.
GetDeviceSnapshots
Get snapshots of device status.
GetDeviceDetailsById
Retrieve device details for a specific host by device ID.
GetAlerts
Retrieve a list of alerts.
GetAlertDetails
Retrieve details of a specific alert.
AcknowledgeAlert
Acknowledge a specific alert.
UpdateAlert
Update details of a specific alert.
DeleteAlert
Delete a specific alert.
QueryDetections
Retrieve detections based on provided query parameters.
GetDetectionDetails
Retrieve details for a specific detection.
UpdateDetection
Update details of a specific detection.
AcknowledgeDetection
Acknowledge a specific detection.
DeleteDetection
Delete a specific detection.
GetUsers
Retrieve a list of users.
GetUserDetails
Retrieve details of a specific user.
CreateUser
Create a new user.
UpdateUser
Update details of a specific user.
DeleteUser
Delete a specific user.
To set up CrowdStrike integration, add the HTTP Request node to your workflow canvas and authenticate it using a predefined credential type. This allows you to perform custom operations, without additional authentication setup. The HTTP Request node makes custom API calls to CrowdStrike to query the data you need using the URLs you provide.
See the example hereTake a look at the CrowdStrike official documentation to get a full list of all API endpoints
Create field
Create a new field in the application.
Read field
Retrieve a specific field from the application.
Update field
Update an existing field in the application.
List fields
List all fields in the application.
Delete field
Remove a specific field from the application.
Create label
Create a new label in the application.
Read label
Retrieve a specific label from the application.
Update label
Update an existing label in the application.
List labels
List all labels in the application.
Delete label
Remove a specific label from the application.
Delete label
Deletes a label identified by the given ID.
Create label
Creates a new label with the specified name and description.
Get label
Retrieves the details of a label identified by the given ID.
List labels
Retrieves a list of labels for a specific function.
Update label
Updates a specific label for a function.
Create text sample
Create a new text sample in the application.
Read sample
Retrieve a specific sample from the application.
List samples
List all samples in the application.
Delete sample
Remove a specific sample from the application.
Annotate sample
Annotate a specific sample in the application.
Create sample
Creates a new text sample associated with a function.
Get sample
Retrieves a specific sample by its ID.
Get samples
Retrieves an array of Sample objects.
Delete sample by Id
Deletes a sample specified by its Id.
Delete sample by ExternalId
Deletes a sample specified by its ExternalId.
Set annotation for a sample
Sets the annotation for a specified sample.
Create access token
This endpoint is used to obtain a new access token for authentication.
Invoke function
Invoke a text function with the specified parameters.
Create field
Create a new field for the specified function.
Get field
Retrieve information about a specific field.
Get field
Retrieve information about a specific field based on its ID.
List fields
Fetch a list of all fields associated with a function.
Update annotation
Update the annotation for a specific sample using the label ID.
Get function summary
Retrieve aggregate information about the function.
Invoke function
Run a specific text function with the provided data.
To set up Nyckel integration, add the HTTP Request node to your workflow canvas and authenticate it using a generic authentication method. The HTTP Request node makes custom API calls to Nyckel to query the data you need using the API endpoint URLs you provide.
These API endpoints were generated using n8n
n8n AI workflow transforms web scraping into an intelligent, AI-powered knowledge extraction system that uses vector embeddings to semantically analyze, chunk, store, and retrieve the most relevant API documentation from web pages. Remember to check the Nyckel official documentation to get a full list of all API endpoints and verify the scraped ones!
The SOAR platform you want
Mountains of monotonous tasks make building and monitoring your workflows a chore. Not anymore.
Learn more
Save engineering resources
Reduce time spent on customer integrations, engineer faster POCs, keep your customer-specific functionality separate from product all without having to code.
Learn more
The world's most popular workflow automation platform for technical teams including
Build complex workflows, really fast