vishalvarmaa/SOC-Detection-AI-Automation-Lab ? reverse-engineered prompt

Build me a SOC automation lab that ties together Wazuh, n8n, PostgreSQL, and a Telegram bot. I want Wazuh alerts to come into n8n through a webhook, get parsed for things like severity, source IP, agent name, and MITRE info, then be routed based on risk. Low severity alerts should just be saved to the database, while higher severity ones should be enriched with threat intelligence from VirusTotal, AbuseIPDB, AlienVault OTX, and Shodan, plus IP geolocation, then scored and marked as low, medium, high, or critical.

Please also add Telegram notifications for urgent alerts, with a clear summary of the threat. On top of that, I want an AI SOC assistant in Telegram that can answer normal questions about the stored alerts, turn plain English into database queries, summarize the results, and handle help and greeting messages too. Include a simple demo mode that simulates an SSH brute force alert so I can test the whole flow without a real incident. If you need current docs, look them up online.