Find threat intelligence matches in DNS logs
Have Notis review the selected profile's analytics logs alongside Abuselpdb threat intelligence and send you a concise report of relevant matches.
Trigger
Recurring schedule
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Action
Get Profile Analytics Logs
Retrieve DNS query activity logs for a profile.
Why this helps
Threat intelligence and DNS activity live in separate places, making it easy to miss a potentially useful connection during a busy week.
- Bring profile activity and threat intelligence into one scheduled review.
- Surface matching log entries for follow-up.
- Get a concise report without manually checking both services.
Setup
Build it in a few focused steps.
- 1Connect Abuselpdb and Control D once in Notis.
- 2Create an automation in Notis and name the profile you want reviewed.
- 3Tell Notis to retrieve that profile's analytics logs, compare available domains or indicators with Abuselpdb threat intelligence, and report matches with their evidence.
- 4Pick a recurring schedule and choose where run reports should go.
- 5Test with one real profile and a date range for which logs are available.
Questions about this workflow
Does this automatically change DNS policies?
No. This workflow reviews logs and reports matches. Review the findings before creating or changing any rules.
What data must be available?
The selected Control D profile must have analytics logs available, and the Abuselpdb check must return relevant threat intelligence. Notis can only compare data returned by the services.
Can it report a clean result?
Yes. Ask Notis to report when it finds no matches, so each scheduled run has a clear outcome.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Abuselpdb to Control d. A trigger fires from one place; an action lands in another.
Abuselpdb triggers
Control d actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Delete Device by ID
Permanently deletes a device, breaking DNS resolution on gadgets using its resolvers.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Delete Profile
Permanently deletes a profile only if no devices enforce it; assigned profiles cannot be deleted.
Delete Profile Rule by Rule ID
Delete a custom DNS filtering rule from a profile.
Delete Rule from Folder
Permanently deletes a custom DNS rule from a profile folder.
Delete Profile Schedule
Delete a schedule from a profile.
List Known Access IPs
List recent IP addresses used to query a device.
Get Analytics Endpoints
Lists available analytics regions and their endpoints.
Get Analytics Levels
Lists the available analytics levels for devices.
Connect any two apps with Notis in the middle.
Abuselpdb and Control d, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Control d.