Triage domains raised in security checklists
Give each domain raised in a checklist a quick, consistent threat categorization check.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Suggest Domain Threat
Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.
Why this helps
Checklist actions lose momentum when domain investigation requires a separate, easy-to-forget step.
- Turn a checklist follow-up into a focused domain check.
- Use Dnsfilter's threat suggestion action for the submitted FQDN.
- Keep the result visible through Notis run reports.
Setup
Build it in a few focused steps.
- 1Connect 21risk and Dnsfilter once in the Notis portal.
- 2Create an automation in Automations, New Automation, and name it.
- 3Tell Notis to request a Dnsfilter threat suggestion for the FQDN supplied with a checklist follow-up.
- 4Choose a webhook trigger and the channel for run reports.
- 5Test with one real domain from a checklist item.
Questions about this workflow
What information must the webhook request include?
It should supply the domain to check. Include any checklist context you want Notis to use in the instruction or request.
Will this mark the checklist item complete?
No. The available Dnsfilter action suggests a domain as a potential threat; it does not update 21risk checklist items.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link 21risk to Dnsfilter. A trigger fires from one place; an action lands in another.
21risk triggers
Dnsfilter actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create IP Address
Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get Application Category
Tool to get basic information of a specific application category. use when you need details for a given application category id.
Get Billing Information
Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.
Get Category
Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.
Get IP Address
Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.
List All Categories
Tool to list all categories including internal categories. use when you need the complete set of filtering categories.
List All IP Addresses
Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.
List All MAC Addresses
Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.
Connect any two apps with Notis in the middle.
21risk and Dnsfilter, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.