Suspicious Login Detection

This n8n workflow is designed for security monitoring and incident response when suspicious login events are detected. It can be initiated either manually from within the n8n UI for testing or automatically triggered by a webhook when a new login event occurs. The workflow first extracts relevant data from the incoming webhook payload, including the IP address, user agent, timestamp, URL, and user ID. It then splits into three parallel processing paths. In the first path, it queries GreyNoise's Community API to retrieve information about the investigated IP address. Depending on the classification and trust level received from GreyNoise, the alert is given a High, Medium, or Low priority. Th

Help me set up the n8n workflow "Suspicious Login Detection" (https://n8n.io/workflows/1993). It uses: HTTP Request, Postgres, Slack, Gmail, Code, HTML. Import the template JSON into my n8n instance, list every credential I need to create, and walk me through testing it.