Quarantined Email Alert to Slack & Jira Ticket Creation

![Sublime Security]({{ $env.WEBHOOK_URL }}
# Workflow Overview

This workflow is initiated by `Sublime Security` whenever an inbound email undergoes scanning and triggers an alert.

In the event that Sublime Security is set up to automatically quarantine the email, this workflow will make an effort to inform the recipient through Slack. To accomplish this, it will utilize the recipient's mailbox address to search for their corresponding Slack username.

If the flagged email has already been opened, this workflow will additionally create a Jira ticket to manage the incident.

## **HTTP Request Node Requirements**
1. Create a rule in Sublime Security which has [auto-quarantine enabled]({{ $env.WEBHOOK_URL }}
2. [Create a webhook]({{ $env.WEBHOOK_URL }} in Sublime which will send an alert to the `Receive Sublime Security Alert` node whenever a selected rule is triggered.

## **Credentials**
- Sublime Security: Find your API key for [Sublime Security]({{ $env.API_BASE_URL }} and save it as an n8n credential with Header Auth in the format `Authorization: Bearer YOUR-API-KEY`.

- Slack: Provide credentials for a Slack app that has access to `users:read.email` and `im:write` scopes.