Put top domain activity in incident context
Send the incident question once and get a readable review of the profile's top domains for your investigation.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Get Profile Analytics Top Domains
Retrieves the most frequently accessed domains for a profile.
Why this helps
A top-domain list is hard to act on when the original incident question and the analyst's context are somewhere else.
- Review top domains alongside a specific question or incident description.
- Get a concise explanation based on returned data.
- Keep unsupported explanations clearly marked as unknown.
Setup
Build it in a few focused steps.
- 1Connect Ai ml api and Control d once in the Notis portal.
- 2Create an automation and describe how to review the profile's top domains against the supplied incident context.
- 3Choose the Notis webhook trigger and choose where run reports should go.
- 4Test with one real incident question and the intended profile.
Questions about this workflow
Does this identify malicious domains automatically?
It can analyze returned domain data against the context you provide, but a top-domain list alone does not prove a domain is malicious.
What information should the webhook request include?
Provide the incident question and enough context to identify the intended Control D profile.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Ai ml api to Control d. A trigger fires from one place; an action lands in another.
Ai ml api triggers
Control d actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Delete Device by ID
Permanently deletes a device, breaking DNS resolution on gadgets using its resolvers.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Delete Profile
Permanently deletes a profile only if no devices enforce it; assigned profiles cannot be deleted.
Delete Profile Rule by Rule ID
Delete a custom DNS filtering rule from a profile.
Delete Rule from Folder
Permanently deletes a custom DNS rule from a profile folder.
Delete Profile Schedule
Delete a schedule from a profile.
List Known Access IPs
List recent IP addresses used to query a device.
Get Analytics Endpoints
Lists available analytics regions and their endpoints.
Get Analytics Levels
Lists the available analytics levels for devices.
Connect any two apps with Notis in the middle.
Ai ml api and Control d, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Control d.