Skip to content
Notis

Review top domains from a Control D profile on schedule

Bring the profile's top domains into a recurring review without a separate manual analytics lookup.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Get Profile Analytics Top Domains

Tool to fetch top domains accessed within a specific profile. Use after confirming profile ID.

Why this helps

Interesting shifts in domain activity can go unnoticed when reviewing analytics depends on someone remembering to check.

  • Make top domain review a recurring task.
  • Keep results in the run report channel you choose.
  • Give the team a repeatable prompt to spot activity worth a closer look.

Setup

Build it in a few focused steps.

  • 1Connect Control D once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and choose a name.
  • 3In one instruction, specify the profile whose top domains should be retrieved and how the team should review the results.
  • 4Pick a recurring Notis schedule as the trigger and choose where run reports go.
  • 5Test the workflow once with a real profile.

Questions about this workflow

Does the workflow flag suspicious domains automatically?

It retrieves top domains. Any judgment about whether a domain is suspicious should be based on your review criteria and the returned data.

Can I use this for multiple profiles?

Specify each profile clearly in the instruction and make sure the run report keeps their results distinguishable.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Agent mail to Control d. A trigger fires from one place; an action lands in another.

Agent mail triggers

Control d actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Delete Device by ID

Tool to delete a Control-D device. Use when you need to remove a device by its identifier after confirming the device_id.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Delete Profile by ID

Tool to delete a profile. Use when you need to remove a profile by its ID after ensuring it is not enforced by any device.

ActionInstant

New Email Received

Trigger for new emails in an AgentMail inbox

TriggerPolling

Delete Profile Rule by Hostname

Tool to delete a specific custom rule by hostname from a profile. Use after confirming profile_id and hostname.

ActionInstant

Delete Profile Rule by Rule ID

Tool to delete a specific custom rule by its ID within a profile. Use after confirming profile_id and rule_id.

ActionInstant

Delete Profile Rule in Folder

Tool to delete a specific custom rule within a folder. Use after confirming profile_id, rule_id, and folder_id.

ActionInstant

Delete Profile Schedule

Tool to delete a specific schedule within a profile. Use after confirming profile_id and schedule_id.

ActionInstant

List Known Access IPs

Tool to list known IPs associated with the account. Use when you need to retrieve recent access IPs for device resolver queries.

ActionInstant

Get Analytics Endpoints

Tool to list analytics storage regions and their endpoints. Use after authenticating to retrieve available analytics regions.

ActionInstant

Connect any two apps with Notis in the middle.

Agent mail and Control d, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Control d.