Skip to content
Notis

Bring catalog context into a recurring threat intelligence review

Choose a Databricks catalog in your instruction. Notis retrieves its details and summarizes them alongside available Abuselpdb intelligence.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Get Catalog Details

Retrieves a catalog’s metadata, owner, properties, and configuration.

Why this helps

Recurring security reviews lose momentum when useful context is scattered across tools and takes effort to gather.

  • Pair available threat intelligence with details for a specified catalog.
  • Keep recurring review notes in the report channel you choose.
  • Avoid repeating the same manual context-gathering steps.

Setup

Build it in a few focused steps.

  • 1Connect Abuselpdb and Databricks once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and give it a name.
  • 3Tell Notis to summarize available Abuselpdb threat intelligence and retrieve details for the Databricks catalog you specify in the instruction.
  • 4Pick a recurring schedule and choose where run reports should go.
  • 5Test with one real run and verify the catalog details and intelligence are clearly distinguished.

Questions about this workflow

Does this identify catalog activity associated with reported IPs?

No. The catalog details action returns catalog metadata, not access logs or IP activity.

How do I specify the catalog?

Name the catalog in the automation instruction so Notis can request its details.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Abuselpdb to Databricks. A trigger fires from one place; an action lands in another.

Abuselpdb triggers

Databricks actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Add Member to Security Group

Adds a user or group to a Databricks security group.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Delete Custom LLM Agent

Irreversibly deletes a custom LLM agent and all its associated data.

ActionInstant

Create Databricks App

Creates a Databricks app in the workspace.

ActionInstant

Delete Databricks App

Deletes a Databricks app and its associated service principal.

ActionInstant

Deploy Databricks App

Deploys an app from workspace source code and provisions its compute resources.

ActionInstant

Get Databricks App Details

Retrieves an app’s configuration, deployment status, resources, and metadata.

ActionInstant

Get Databricks App Permission Levels

Lists the permission levels available for an app.

ActionInstant

Get Databricks App Permissions

Retrieves who can access an app and their permission levels.

ActionInstant

Connect any two apps with Notis in the middle.

Abuselpdb and Databricks, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Databricks.