Check suspicious domains mentioned in Box comments
Turn a security concern in a Box comment into a DNSFilter threat check, with the result sent to your chosen report channel.
Trigger
New File Comment Added
Triggers when a new comment is added to a file in Box. This trigger monitors a specific Box file and fires when new comments are detected.
Action
Suggest Domain Threat
Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.
Why this helps
Domain concerns in document comments can be easy to miss when security review happens across several tools.
- Review domain concerns without switching apps to start a check.
- Keep the DNSFilter suggestion with the automation run report.
- Reduce the chance that a comment mentioning a suspicious domain gets overlooked.
Setup
Build it in a few focused steps.
- 1Connect Box and DNSFilter once in the Notis portal.
- 2Create an automation in Automations, New Automation, and give it a name.
- 3In one instruction, tell Notis to assess a suspicious domain mentioned in a new comment on the monitored Box file with DNSFilter, then report the suggestion.
- 4Pick the Box New File Comment Added trigger and choose where run reports should go.
- 5Test with one real Box comment containing a domain you want reviewed.
Questions about this workflow
Does this block the domain automatically?
No. The available DNSFilter action suggests a domain as a potential threat. Review the result and handle any policy change separately.
What if the comment contains more than one domain?
Tell Notis in the instruction how to handle multiple domains, such as checking each one and reporting each suggestion.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Box to Dnsfilter. A trigger fires from one place; an action lands in another.
Box triggers
Dnsfilter actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create IP Address
Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get Application Category
Tool to get basic information of a specific application category. use when you need details for a given application category id.
Collaboration Details Changed
Triggers when a collaboration's details change (e.g., role, status, expiration). This trigger monitors a specific collaboration and detects when any meaningful field changes, such as role, status, expiration date, access type, or acknowledgment status.
Get Billing Information
Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.
Comment Changed
Triggers when a comment's content or details change in Box. This trigger monitors a specific Box comment and detects when any meaningful field changes, such as message text edits, tagged message changes, or modification timestamp updates.
Get Category
Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.
New File Comment Added
Triggers when a new comment is added to a file in Box. This trigger monitors a specific Box file and fires when new comments are detected.
Get IP Address
Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.
File Metadata Changed
Triggers when a file's metadata or properties change in Box. This trigger monitors a specific Box file and fires when changes are detected in key fields like name, description, size, modification time, parent folder, or status.
List All Categories
Tool to list all categories including internal categories. use when you need the complete set of filtering categories.
File Shared Link Changed
Triggers when a file's shared link settings change in Box. This trigger monitors a specific Box file's shared link and fires when changes are detected in the shared link configuration, such as access level, permissions, password protection, expiration date, or vanity URL.
List All IP Addresses
Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.
New File Version Uploaded
Triggers when a new file version is uploaded to a file in Box. This trigger monitors a specific Box file and fires when new versions are detected.
List All MAC Addresses
Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.
Connect any two apps with Notis in the middle.
Box and Dnsfilter, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.