Skip to content
Notis

Screen new calendar links for DNS threats

Check unfamiliar event links as they appear, so you can review suspicious domains without leaving your calendar workflow.

Trigger

Event Created

Polling trigger that fires when a new calendar event is created. Returns event ID, summary, start/end times, and organizer info.

Action

Suggest Domain Threat

Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.

Why this helps

New event links can be easy to overlook when your calendar fills up and context switches pile on.

  • Review domains found in newly created event links using DNSFilter's threat suggestion tool.
  • Receive a run report that makes suspicious links easier to follow up on.
  • Avoid manually copying event links into a separate security review.

Setup

Build it in a few focused steps.

  • 1Connect Google Calendar and DNSFilter once in the Notis portal.
  • 2Create an automation in Notis and give it a clear name.
  • 3Tell Notis to inspect domains in new event links and use DNSFilter to suggest whether each is a potential threat.
  • 4Pick the Event Created trigger, choose where run reports should go, and test with one real example.

Questions about this workflow

Does this automatically block a domain?

No. The available DNSFilter action suggests a domain as a potential threat. Review the result and handle any policy change separately.

What event data can this use?

The Event Created trigger provides the event ID, summary, start and end times, and organizer info. Link details are not listed in its returned data, so include the URL or event details through a source that provides them if you want domain inspection.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Google Calendar to Dnsfilter. A trigger fires from one place; an action lands in another.

Google Calendar triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Get Application Category

Tool to get basic information of a specific application category. use when you need details for a given application category id.

ActionInstant

Attendee Response Changed

Polling trigger that fires when any attendee's RSVP changes to accepted, declined, or tentative. Returns attendee info and current status.

TriggerPolling

Get Billing Information

Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.

ActionInstant

Event Canceled or Deleted

Triggers when a Google Calendar event is cancelled or deleted. Returns minimal data: event_id, summary (if available), and cancellation timestamp.

TriggerPolling

Get Category

Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.

ActionInstant

Event Starting Soon

Triggers when a calendar event is within a configured number of minutes from starting. Returns event details, time remaining, attendees, and join links when available.

TriggerPolling

Get IP Address

Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.

ActionInstant

Calendar Event Changes

**SOON TO BE DEPRECATED** - Use Calendar Event Sync (polling trigger) instead. Real-time webhook trigger for calendar event changes. Returns event metadata only. For full event data, use Calendar Event Sync (polling trigger).

TriggerInstant

List All Categories

Tool to list all categories including internal categories. use when you need the complete set of filtering categories.

ActionInstant

Event Created

Polling trigger that fires when a new calendar event is created. Returns event ID, summary, start/end times, and organizer info.

TriggerPolling

List All IP Addresses

Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.

ActionInstant

Calendar Event Sync

Polling trigger that returns full event data including details, attendees, and metadata. For real-time notifications with basic info, use Calendar Event Changes (webhook).

TriggerPolling

List All MAC Addresses

Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.

ActionInstant

Connect any two apps with Notis in the middle.

Google Calendar and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.