Skip to Workflow Atlas
Event-Driven AutomationAI systemAdvanced

Suspicious Login Detection Workflow

Suspicious Login Detection Workflow is a 33-node automation blueprint connecting PostgreSQL, Gmail, Slack. Inspect its trigger, execution graph, branches, and implementation requirements.

System map / archived topology

See the whole system without the collisions.

Archived canvas positions are normalized into readable zones. Every visible connector still represents an edge from the source graph.

33

Nodes

40

Edges

5

Zones

Suspicious Login Detection Workflow execution graphStructural view of 32 workflow nodes and 39 visible connections. Parameters and credentials are intentionally excluded.ZONE 01Entry4 NODESZONE 02Control7 NODESZONE 03Operations10 NODESZONE 04Operations8 NODESZONE 05Operations3 NODESNew /login eventTRIGGER / WEBHOOK02Extract relevant dataTRANSFORM / SET01When clicking "Execute…TRIGGER / MANUALTRIGGER28Example eventTRANSFORM / CODE29noise?DECISION / IF17riot?DECISION / IF21GreyNoiseINTEGRATION / HTTPREQUEST25Complete login infoDECISION / MERGE10IP APIINTEGRATION / HTTPREQUEST26MergeDECISION / MERGE08UserParserINTEGRATION / HTTPREQUEST27Check classificationDECISION / SWITCH20🔴 Priority: HIGHTRANSFORM / SET22Check trust levelDECISION / SWITCH19🟡 Priority: MEDIUMTRANSFORM / SET23🟢 Priority: LOWTRANSFORM / SET24Get last 10 logins fro…INTEGRATION / POSTGRES04Unknown threat?DECISION / IF03Query IP API1INTEGRATION / HTTPREQUEST05Known, Do NothingINTEGRATION / NOOP30Parse User AgentINTEGRATION / HTTPREQUEST07SlackINTEGRATION / SLACK18New LocationINTEGRATION / NOOP12New location?DECISION / IF06Query user by IDINTEGRATION / POSTGRES11Known LocationINTEGRATION / NOOP31New Device/BrowserINTEGRATION / NOOP13New Device/Browser?DECISION / IF09Old Device/BrowserINTEGRATION / NOOP32HTMLINTEGRATION / HTML15Inform userINTEGRATION / GMAIL16User has email?DECISION / IF14
triggeraidecisiontransformintegration
Scroll horizontally to inspect every zone.Showing 32 of 33 nodes · structural metadata only · graph 8158213a5a1e4aaa

Structured review

Read the workflow as a system, not a node dump.

The archived graph is grouped into operational zones, then checked against the controls needed to adapt the pattern safely. Every count below is derived from the normalized record.

01

Entry signals

2 nodes

Events, schedules, and unconnected roots that can start an execution.

New /login event

Trigger

When clicking "Execute Workflow"

Trigger

02

Data & operations

15 nodes

Transformations and external-system actions that move the work forward.

Extract relevant data

Transform

Get last 10 logins from the same user

Integration

Query IP API1

Integration

Parse User Agent

Integration

Query user by ID

Integration

New Location

Integration

+ 9 more in system map
03

Intelligence & routing

10 nodes

Model calls and control points that interpret, branch, or govern the run.

Unknown threat?

Decision

New location?

Decision

Merge

Decision

New Device/Browser?

Decision

Complete login info

Decision

User has email?

Decision

+ 4 more in system map
04

Terminal actions

5 nodes

Nodes with no visible outgoing edge: the workflow’s observable outcomes.

Inform user

Integration

Slack

Integration

Known, Do Nothing

Integration

Known Location

Integration

Old Device/Browser

Integration

Provenance boundary

Inspectable does not mean redistributable.

This page publishes structural metadata extracted from a local workflow archive. Parameters, credential references, code bodies, and downloadable JSON are excluded. The route can enter indexing only after a graph match and quality gate; source licensing remains a separate promotion gate.

Graph match
exact
Quality score
14 / 14
Raw download
Held
Crawler state
Follow

Adjacent systems

Keep tracing the stack.

Related records are ranked by shared integrations and graph quality.

Turn the map into a plan

Adapt this blueprint to your company.

Bring the system shape into a workspace, then define the production controls, data boundaries, owners, and delivery sequence around your context.