Automated Qualys Reports to TheHive Integration Workflow

This n8n workflow automates the process of fetching vulnerability reports from Qualys, filtering out already processed reports, and creating organized cases in TheHive for each new report. Triggered manually for testing and scheduled to run every hour, it ensures security teams maintain up-to-date oversight of vulnerability assessments. The workflow captures report metadata, converts XML responses to JSON for easy manipulation, filters reports based on timestamps, and attaches the downloaded reports directly to cases in TheHive. This setup enhances efficiency in vulnerability management, reduces manual effort, and provides structured reporting for security operations centers (SOCs). Key nodes include global variable initialization, API requests to Qualys, data filtering, report processing loops, and case management in TheHive. Practical uses include continuous vulnerability monitoring, automated security incident documentation, and streamlined security auditing.