Threatdown (Malwarebytes)Install

Summary

Creates a new scan schedule in Threatdown (Malwarebytes) by sending a POST request to the schedules endpoint, with the body built from the Body Fields collection and optional raw JSON.

Inputs

• Body Fields — Collection of optional request body fields: name, enabled (default true), rrule (recurrence rule string), command, and command_data settings. The command_data settings include schedule_for_windows, schedule_for_mac, scan_settings (type, scan_path, scan_memory, scan_registry, scan_startup, fixed_drive, ark, no_archive, remove, pup_detection, pum_detection) and mac_scan_settings (pup_detection, remove). Dotted field names are nested into the request body.
• Additional JSON Body — Raw JSON object merged with the Body Fields values. Use it for fields not listed in the collection or for full payloads.

Output shape

The API response for the created schedule, normalized into n8n items (typically the schedule record).

The source pack shows only function signatures, so the exact merge precedence and response shape are not confirmed. No fields are marked required in the UI, but the API will likely need at least name, rrule, command and command_data.

Examples

Example 1: Create a weekly threat scan schedule for Windows endpoints

Set Name, an rrule such as FREQ=WEEKLY, Command to the scan command, Schedule For Windows true, Scan Memory true, and Scan Settings Type to the desired scan type.

Example 2: Create a schedule from a full JSON payload built upstream

Leave Body Fields empty and put the complete schedule JSON in Additional JSON Body, using an expression to reference earlier node data.

Links

• n8n community nodes installation guide