Skip to content

Cortex#

The Cortex node allows you to automate work in Cortex, and integrate Cortex with other applications. n8n has built-in support for a wide range of Cortex features, including executing analyzers, and responders, as well as getting job details.

On this page, you'll find a list of operations the Cortex node supports and links to more resources.

Credentials

Refer to Cortex credentials for guidance on setting up authentication.

Examples and templates

For usage examples and templates to help you get started, take a look at n8n's Cortex integrations list.

Basic Operations#

  • Analyzer
    • Execute Analyzer
  • Job
    • Get job details
    • Get job report
  • Responder
    • Execute Responder

Example Usage#

This workflow allows you to analyze a URL and get the job details using the Cortex node. You can also find the workflow on n8n.io. This example usage workflow would use the following nodes. - Start - Cortex

The final workflow should look like the following image.

A workflow with the Cortex node

1. Start node#

The start node exists by default when you create a new workflow.

2. Cortex node (analyzer: execute)#

This node will analyze a URL. If you want to analyze a different observable type, select that instead.

  1. First of all, you'll have to enter credentials for the Cortex node. You can find out how to do that here.
  2. Select 'Abuse_Finder_3_0' from the Analyzer Type dropdown list.
  3. Select 'URL' from the Observable Type dropdown list.
  4. Enter the URL you want to analyze in the Observable Value field.
  5. Click on Execute Node to run the node.

In the screenshot below, you will notice that the node starts the analysis of the URL.

Using the Cortex node to analyze a URL

3. Cortex1 node (job: get)#

This node will return the job details for the analysis that we executed in the previous node.

  1. Select the credentials that you entered in the previous node.
  2. Select 'Job' from the Resource dropdown list.
  3. Click on the gears icon next to the Job ID field and click on Add Expression.
  4. Select the following in the Variable Selector section: Nodes > Cortex > Output Data > JSON > _id. You can also add the following expression: {{$node["Cortex"].json["_id"]}}.
  5. Click on Execute Node to run the node.

In the screenshot below, you will notice that the node starts the analysis of the URL.

Using the Cortex node to get job details