Review lead IP risk on a recurring schedule
Set up a scheduled review of Salesforce leads that have IP context available, then have Notis check and summarize the results.
Trigger
Recurring schedule
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Action
List leads
Lists leads from salesforce using soql query, allowing flexible filtering, sorting, and field selection.
Why this helps
Lead reviews can miss useful threat context when the relevant data is spread across CRM records and security tools.
- Brings available IP context into a repeatable lead review.
- Surfaces findings in the run report for quick triage.
- Avoids manually checking each supplied indicator.
Setup
Build it in a few focused steps.
- 1Connect Abuselpdb and Salesforce once in the Notis portal.
- 2Create an automation in Automations, New Automation, and give it a name.
- 3In one instruction, specify which leads to review, where their IP context comes from, and how to summarize Abuselpdb results.
- 4Pick a recurring schedule and choose where run reports should go.
- 5Test with one real lead that has an IP value available.
Questions about this workflow
Will Salesforce provide an IP address for every lead?
Only review leads where the needed IP data is available. Specify its source or provide it as input.
Does this workflow change lead records?
This workflow reads leads and reports the findings. It does not update lead fields.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Abuselpdb to Salesforce. A trigger fires from one place; an action lands in another.
Abuselpdb triggers
Salesforce actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create Salesforce Account
Deprecated: creates a new salesforce account using a json post request, requiring 'name'; specific fields (e.g., custom, dunsnumber) may have org-level prerequisites.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Add contact to campaign
Adds a contact to a campaign by creating a campaignmember record, allowing you to track campaign engagement.
Add lead to campaign
Adds a lead to a campaign by creating a campaignmember record, allowing you to track campaign engagement.
Add product to opportunity
Adds a product (line item) to an opportunity. the product must exist in a pricebook entry that's associated with the opportunity's pricebook.
Apply lead assignment rules
Applies configured lead assignment rules to a specific lead, automatically routing it to the appropriate owner based on your organization's rules.
Associate contact to account
Associates a contact with an account by updating the contact's accountid field.
Clone opportunity with products
Clones an opportunity and optionally its products (line items). creates a new opportunity with the same field values and products as the original.
Clone record
Creates a copy of an existing salesforce record by reading its data, removing system fields, and creating a new record. optionally apply field updates to the clone.
Connect any two apps with Notis in the middle.
Abuselpdb and Salesforce, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Salesforce.