Review threat intelligence with your Databricks metastore context
Set a recurring review that brings Abuselpdb threat intelligence and the current Databricks metastore assignment into one summary.
Trigger
Recurring schedule
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Action
Get Current Metastore Assignment
Retrieves the metastore currently assigned to the workspace.
Why this helps
Threat intelligence reviews can be easy to skip when they require manually gathering context from multiple services.
- Put a recurring threat intelligence review on your schedule.
- Include the current metastore assignment as workspace context.
- Receive a concise summary without manually gathering both inputs.
Setup
Build it in a few focused steps.
- 1Connect Abuselpdb and Databricks once in the Notis portal.
- 2Create an automation in Automations, New Automation, and give it a name.
- 3Tell Notis to review the latest available Abuselpdb threat intelligence, retrieve the current Databricks metastore assignment, and summarize both for review.
- 4Pick a recurring schedule and choose where run reports should go.
- 5Test with one real run and confirm the report includes the assignment and source intelligence.
Questions about this workflow
Does the metastore lookup show whether an IP reached Databricks?
No. It returns the current metastore assignment for the workspace, not network or access activity.
How often will the review run?
Choose the recurring schedule when setting up the automation in Notis.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Abuselpdb to Databricks. A trigger fires from one place; an action lands in another.
Abuselpdb triggers
Databricks actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Add Member to Security Group
Adds a user or group to a Databricks security group.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Delete Custom LLM Agent
Irreversibly deletes a custom LLM agent and all its associated data.
Create Databricks App
Creates a Databricks app in the workspace.
Delete Databricks App
Deletes a Databricks app and its associated service principal.
Deploy Databricks App
Deploys an app from workspace source code and provisions its compute resources.
Get Databricks App Details
Retrieves an app’s configuration, deployment status, resources, and metadata.
Get Databricks App Permission Levels
Lists the permission levels available for an app.
Get Databricks App Permissions
Retrieves who can access an app and their permission levels.
Connect any two apps with Notis in the middle.
Abuselpdb and Databricks, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Databricks.