You can see plenty of fully working examples at our GitHub repo.
General Structure
Each workflow compose of:- metadata - id, description
- triggers - when this workflow runs?
- steps/actions - what this workflow should do?
- Triggers
- Steps And Actions
- Conditions
- Functions
- Context
- Providers
- Variables
- Foreach Loops
- Alert Enrichment