Automate cybersecurity incident response with Claude AI, VirusTotal and Slack

About

This workflow automates end-to-end cybersecurity incident response by ingesting alerts from multiple sources, enriching threat intelligence, assessing severity with Claude AI, executing containment actions, notifying stakeholders, and creating audit-ready tickets. How it works Ingest Alert - Webhook receives alerts from SIEM, EDR, firewall, IDS/IPS Validate & Normalize - Standardizes alert format across all sources Enrich Threat Intel - Queries VirusTotal, AbuseIPDB, Shodan for context AI Seve