Review known access IPs from an emailed alert
Add known account IPs to the first look at an emailed access concern.
Trigger
New Email Received
Trigger for new emails in an AgentMail inbox
Action
List Known Access IPs
Tool to list known IPs associated with the account. Use when you need to retrieve recent access IPs for device resolver queries.
Why this helps
Access alerts can prompt a separate search for recent account IP context before the team can triage.
- Retrieve known IPs associated with the account for a first review.
- Keep IP context connected to the incoming alert.
- Help triage an access concern without immediately changing account settings.
Setup
Build it in a few focused steps.
- 1Connect AgentMail and Control D once in the Notis portal.
- 2Create an automation in Automations, New Automation, and give it a clear name.
- 3In one instruction, ask Notis to list known Control D account IPs when a new email reports an account access concern.
- 4Pick AgentMail New Email Received as the trigger and choose where run reports go.
- 5Test with one real access alert and review the returned IP information.
Questions about this workflow
Does this prove an IP is malicious?
No. The result provides known access IP context and needs human interpretation.
Does it change device resolver settings?
No. It only lists known IPs associated with the account.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Agent mail to Control d. A trigger fires from one place; an action lands in another.
Agent mail triggers
Control d actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Delete Device by ID
Tool to delete a Control-D device. Use when you need to remove a device by its identifier after confirming the device_id.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Delete Profile by ID
Tool to delete a profile. Use when you need to remove a profile by its ID after ensuring it is not enforced by any device.
New Email Received
Trigger for new emails in an AgentMail inbox
Delete Profile Rule by Hostname
Tool to delete a specific custom rule by hostname from a profile. Use after confirming profile_id and hostname.
Delete Profile Rule by Rule ID
Tool to delete a specific custom rule by its ID within a profile. Use after confirming profile_id and rule_id.
Delete Profile Rule in Folder
Tool to delete a specific custom rule within a folder. Use after confirming profile_id, rule_id, and folder_id.
Delete Profile Schedule
Tool to delete a specific schedule within a profile. Use after confirming profile_id and schedule_id.
List Known Access IPs
Tool to list known IPs associated with the account. Use when you need to retrieve recent access IPs for device resolver queries.
Get Analytics Endpoints
Tool to list analytics storage regions and their endpoints. Use after authenticating to retrieve available analytics regions.
Connect any two apps with Notis in the middle.
Agent mail and Control d, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Control d.