Skip to content
Notis

Focus lead triage when an IP threat signal arrives

When a signal arrives, have Notis check the IP and find leads using the criteria you supply so a person can review the matches.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

List leads

Lists leads from salesforce using soql query, allowing flexible filtering, sorting, and field selection.

Why this helps

A threat signal can create a broad, distracting CRM search without a consistent triage process.

  • Combines the signal with a focused CRM lookup.
  • Helps people review relevant leads sooner.
  • Reports matches without changing lead records.

Setup

Build it in a few focused steps.

  • 1Connect Abuselpdb and Salesforce once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and give it a name.
  • 3In one instruction, specify the incoming IP, the lead matching criteria, and how to summarize relevant results.
  • 4Pick the webhook trigger and choose where run reports should go.
  • 5Test with one signal and a known lead matching example.

Questions about this workflow

Can a lead be matched to an IP automatically?

Only if the IP is available in Salesforce data or supplied matching context. Define how the match should be made.

Does it change lead status?

No. This workflow lists and summarizes relevant lead results for review.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Abuselpdb to Salesforce. A trigger fires from one place; an action lands in another.

Abuselpdb triggers

Salesforce actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create Salesforce Account

Deprecated: creates a new salesforce account using a json post request, requiring 'name'; specific fields (e.g., custom, dunsnumber) may have org-level prerequisites.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Add contact to campaign

Adds a contact to a campaign by creating a campaignmember record, allowing you to track campaign engagement.

ActionInstant

Add lead to campaign

Adds a lead to a campaign by creating a campaignmember record, allowing you to track campaign engagement.

ActionInstant

Add product to opportunity

Adds a product (line item) to an opportunity. the product must exist in a pricebook entry that's associated with the opportunity's pricebook.

ActionInstant

Apply lead assignment rules

Applies configured lead assignment rules to a specific lead, automatically routing it to the appropriate owner based on your organization's rules.

ActionInstant

Associate contact to account

Associates a contact with an account by updating the contact's accountid field.

ActionInstant

Clone opportunity with products

Clones an opportunity and optionally its products (line items). creates a new opportunity with the same field values and products as the original.

ActionInstant

Clone record

Creates a copy of an existing salesforce record by reading its data, removing system fields, and creating a new record. optionally apply field updates to the clone.

ActionInstant

Connect any two apps with Notis in the middle.

Abuselpdb and Salesforce, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Salesforce.