Skip to Workflow Atlas
Playbook AtlasWorkflow Atlas
Workflow blueprintBrowse workflows
ETL PipelineAI systemIntermediate

Email Incident Management Workflow

Email Incident Management Workflow is a 15-node automation blueprint connecting IMAP Email, TheHive, Cortex. Inspect its trigger, execution graph, branches, and implementation requirements.

IMAP EmailTheHiveCortex

Interactive system map

Execution flows, separated by connected path.

Each horizontal lane is one connected flow. Solid lines show runtime execution; dashed lines show AI, model, memory, or tool dependencies.

15

Nodes

14

Links

1

Flows

Connected tools

3 integrations

  • IMAP Email
  • TheHive
  • Cortex
Email Incident Management Workflow execution lanes1 connected flows containing 15 workflow nodes and 14 visible links. Solid lines are execution links and dashed lines are support dependencies. Focus any node to inspect its immediate path.IMAP Email. integration node, emailReadImap. 0 incoming and 1 outgoing connections.IMAP EmailINTEGRATIONEMAILREADIMAP0 IN / 1 OUTTheHive. integration node, theHive. 1 incoming and 1 outgoing connections.TheHiveINTEGRATIONTHEHIVE1 IN / 1 OUTCreate Case. integration node, theHive. 1 incoming and 1 outgoing connections.Create CaseINTEGRATIONTHEHIVE1 IN / 1 OUTCase. integration node, theHive. 1 incoming and 1 outgoing connections.CaseINTEGRATIONTHEHIVE1 IN / 1 OUTWait. integration node, wait. 1 incoming and 1 outgoing connections.WaitINTEGRATIONWAIT1 IN / 1 OUTObservable. integration node, theHive. 1 incoming and 1 outgoing connections.ObservableINTEGRATIONTHEHIVE1 IN / 1 OUTAnalyzer Email. integration node, theHive. 1 incoming and 1 outgoing connections.Analyzer EmailINTEGRATIONTHEHIVE1 IN / 1 OUTCortex. integration node, cortex. 1 incoming and 1 outgoing connections.CortexINTEGRATIONCORTEX1 IN / 1 OUTIF. decision node, if. 1 incoming and 3 outgoing connections.IFDECISIONIF1 IN / 3 OUTUpdate Case Domain. integration node, theHive. 1 incoming and 1 outgoing connections.Update Case DomainINTEGRATIONTHEHIVE1 IN / 1 OUTUpdate Case Email. integration node, theHive. 1 incoming and 1 outgoing connections.Update Case EmailINTEGRATIONTHEHIVE1 IN / 1 OUTUpdate Case Ip. integration node, theHive. 1 incoming and 1 outgoing connections.Update Case IpINTEGRATIONTHEHIVE1 IN / 1 OUTOTX DOMAIN. integration node, theHive. 1 incoming and 0 outgoing connections.OTX DOMAININTEGRATIONTHEHIVE1 IN / 0 OUTEmail Reputation. integration node, theHive. 1 incoming and 0 outgoing connections.Email ReputationINTEGRATIONTHEHIVE1 IN / 0 OUTOTX IP. integration node, theHive. 1 incoming and 0 outgoing connections.OTX IPINTEGRATIONTHEHIVE1 IN / 0 OUT

Signal inspector

Focus, hover, or select a node to illuminate its real path.

Execution linkSupport dependencytriggeraidecisiontransformintegration
Scroll horizontally to follow every connected flow.15 connected nodesEnter or click to lock · Escape to clear

Execution breakdown

Follow each connected flow from start to outcome.

The readable view below uses the same graph relationships as the interactive map. Each row is a connected flow; columns advance only when an actual link connects the nodes.

01

Connected Flow

IMAP Email

14 Execution Links

  1. Start

    IMAP Email

    Integration

  2. Step 2

    TheHive

    Integration

  3. Step 3

    Create Case

    Integration

  4. Step 4

    Case

    Integration

  5. Step 5

    Wait

    Integration

  6. Step 6

    Observable

    Integration

  7. Step 7

    Analyzer Email

    Integration

  8. Step 8

    Cortex

    Integration

  9. Step 9

    IF

    Decision

  10. Step 10

    Update Case Domain

    Integration

    Update Case Email

    Integration

    Update Case Ip

    Integration

  11. Outcome

    OTX DOMAIN

    Integration

    Email Reputation

    Integration

    OTX IP

    Integration

Turn the map into a plan

Adapt this blueprint to your company.

Bring the system shape into a workspace, then define the production controls, data boundaries, owners, and delivery sequence around your context.

Create a build planReturn to the atlas