Actions16
- 8-K Filing Actions
- CSIRT Entry Actions
- Group Actions
- IOC Actions
- Negotiation Actions
- Press Article Actions
- Ransomnote Actions
- Victim Actions
- YARA Rule Actions
Overview
This node integrates with the ransomware.live API to retrieve press articles related to ransomware incidents. Specifically, the "List Articles" operation under the "Press Article" resource fetches either all press articles or recent ones, optionally filtered by year, month, and country. This is useful for security analysts, researchers, or journalists who want to monitor ransomware-related news and trends over time or by region.
Practical examples:
- Fetch all press articles from 2023 in the United States to analyze ransomware activity trends.
- Retrieve recent press articles from France to stay updated on the latest ransomware news in that country.
Properties
| Name | Meaning |
|---|---|
| Year | Filter articles by a 4-digit year (e.g., "2024"). |
| Month | Filter articles by a 2-digit month (e.g., "03" for March). |
| Country | Filter articles by a 2-letter ISO country code (e.g., "FR" for France, "US" for United States). |
Output
The output JSON contains an array of press article objects returned by the ransomware.live API. Each object represents a press article with its associated metadata (such as title, date, source, content snippet, etc.). The exact structure depends on the API response but generally includes details relevant to ransomware press coverage.
No binary data output is produced by this node.
Dependencies
- Requires an API key credential for the ransomware.live API.
- The node uses the base URL
https://api-pro.ransomware.liveby default but can be configured via credentials. - No additional external dependencies are needed beyond the API access.
Troubleshooting
- Unsupported Operation Error: If you select an operation other than "all" or "recent" for the Press Article resource, the node will throw an error indicating unsupported operation. Ensure only valid operations are chosen.
- Invalid Filters: Providing invalid year, month, or country codes may result in empty responses or API errors. Use correct formats: 4-digit year, 2-digit month, and 2-letter ISO country codes.
- Authentication Errors: Missing or incorrect API credentials will cause authentication failures. Verify that the API key credential is correctly set up in n8n.
- API Rate Limits or Downtime: If the API is unreachable or rate-limited, the node may fail. Check network connectivity and API status.
Links and References
- ransomware.live API Documentation (for detailed API endpoints and data schema)
- ISO Country Codes (for valid country filter values)