{"repo":"depalmar/AI-Powered-Ransomware-Intelligence-Agent","free":true,"listed":false,"github":"https://github.com/depalmar/AI-Powered-Ransomware-Intelligence-Agent","clone":"git clone https://github.com/depalmar/AI-Powered-Ransomware-Intelligence-Agent.git","description":"Automated n8n workflow for ransomware threat monitoring using ransomware.live API and Claude AI — companion to the SANS Ransomware Intelligence webinar","language":"Python","stars":22,"topics":["anthropic","claude","n8n","ransomware","sans","security-automation","threat-intelligence","ai","mitre-attack"],"license":null,"category":"workflow-automation","readme_excerpt":"🛡️ AI-Powered Ransomware Intelligence Agent (n8n Workflows) Author: Raymond DePalma     Companion to the SANS Ransomware Intelligence Webinar Automated threat intelligence pipelines that continuously monitor ransomware leak sites, run AI-powered analysis, and deliver rich interactive reports — to Slack, Google Docs, and email. --- 🖼️ Preview n8n Workflow HTML Report — Dashboard HTML Report — Charts & Analysis HTML Report — Lifecycle & Mindmap --- 📊 Workflow Progression Level File LLM Key Capabilities Visibility ------- ------ ----- ----------------- ------------ 101 101 ransomware threat monitor.json Claude Sonnet Monitor → AI analysis → HTML + Slack report ✅ Public 101 (Ollama) 101 ransomware threat monitor ollama.json Ollama (local) Same as 101, fully local — no API costs ✅ Public 200 200 ransomware intel advanced.json Claude Sonnet + IOC enrichment, YARA rules, historical trending, email + JIRA ✅ Public 200 (Ollama) 200 ransomware intel advanced ollama.json Ollama (local) Same as 200, fully local ✅ Public --- ✨ What the 101 Workflow Produces Import, activate, and within minutes you get a full dark-themed threat intelligence brief: - 8 KPI cards — Active groups, total victims, countries, industries, time-to-encrypt, victims/day, double extortion rate, composite risk score - MITRE ATT&CK table — Observed TTPs with technique IDs, tactic phases, and severity badges - 5 Chart.js charts — Geographic doughnut, industry doughnut, TTP severity polar area, group compari","default_branch":null,"files":null,"tree":[],"storefront":"/r/depalmar","claimed":false,"request_supported":{"post":"https://gitbuyer.com/r/depalmar/AI-Powered-Ransomware-Intelligence-Agent/request-supported","requests":0},"note":"indexed from public GitHub; nothing is for sale on this page. Clone it from GitHub. Paid listings live at /search."}