Learn how to set up n8n on Kali Linux using Docker to automate SOC workflows. Covers deployment, configuration, and troubleshooting.

As security operations continue to evolve, automation has become a critical component of modern SOC environments. After successfully deploying Wazuh for threat detection and onboarding endpoints, the next step in building a functional SOC lab is enabling automated response and orchestration.

In this article, I set up n8n locally using Docker on Kali Linux to serve as the automation engine for my SOC environment. This setup lays the foundation for integrating alert data, streamlining ticketing processes, and simulating real SOC analysts' workflows.

By the end of this guide, the automation layer will be fully deployed and ready to connect with Wazuh for intelligent alert handling.

Create n8n Project Directory

Run:

mkdir n8n_docker 
cd n8n_docker

I created a dedicated directory for n8n to keep the automation environment organized and separate from other Docker deployments.