Skip to content
Notis

Review Abuse Context and Sandbox Logs Together

Start from an investigation request and collect the IP reputation and sandbox logs needed for a manual review.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Get Sandbox Logs

View logs from a sandbox.

Why this helps

Gathering an IP reputation check and sandbox console output separately adds steps when you need to review an incident.

  • Check the IP reputation through Abuselpdb.
  • Retrieve logs for the sandbox ID included in the request.
  • Collect both results in the Notis run report for follow-up.

Setup

Build it in a few focused steps.

  • 1Connect Abuselpdb and E2b once in the Notis portal.
  • 2Create an automation in Automations, New Automation, or tell Notis what you want from any channel.
  • 3Ask Notis to check the submitted IP and retrieve logs for the supplied sandbox ID.
  • 4Pick the Notis webhook trigger and choose where run reports should go.
  • 5Test with one real investigation request.

Questions about this workflow

Will this workflow interpret log lines as confirmed malicious behavior?

Not by default. Ask Notis to summarize the returned logs, and provide any criteria needed to flag behavior.

What should the request include?

Include the IP to check and the E2B sandbox ID whose logs should be retrieved.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Abuselpdb to E2b. A trigger fires from one place; an action lands in another.

Abuselpdb triggers

E2b actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Connect to Sandbox

Connect to an existing sandbox and view its details.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Create Template

Create a template for launching sandbox environments.

ActionInstant

Create Webhook

Register a webhook for sandbox lifecycle notifications.

ActionInstant

Delete Sandbox

Terminate and permanently delete a sandbox; it cannot be resumed.

ActionInstant

Delete Webhook

Unregister a webhook and stop its lifecycle notifications.

ActionInstant

Delete Template

Permanently deletes a template; running or paused sandboxes must not use it.

ActionInstant

Check API Health

Check whether the service is operational.

ActionInstant

Get Sandbox

View details about a sandbox.

ActionInstant

Connect any two apps with Notis in the middle.

Abuselpdb and E2b, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business E2b.