Skip to content
Notis

Investigate IP risk when a warning keyword appears

Connect a clear document signal to a focused security check.

Trigger

Keyword Detected in Document

Triggers when a specific keyword or phrase first appears in a Google Doc. This trigger monitors a Google Doc and fires once when the specified keyword is detected. After the keyword is found, the trigger will not fire again until reset.

Action

Hazard Report API

Tool to fetch a cybersecurity hazard report for a specified ip address. use when assessing an ip's threat profile (vpn, proxy, blacklists, hosting risk).

Why this helps

Security language in documents can sit unnoticed until the risk window has passed.

  • Respond to risk signals sooner
  • Focus reviews on relevant documents
  • Create consistent security checks

Setup

Build it in a few focused steps.

  • 1Connect Google Docs and Big data cloud in Notis once.
  • 2Create an automation describing the hazard review for the supplied IP.
  • 3Pick Keyword Detected in Document as the trigger.
  • 4Choose a report destination and test with one document containing the keyword.

Questions about this workflow

What does the hazard report assess?

It can report VPN, proxy, blacklist, hosting, and related threat signals.

Will it run repeatedly?

The trigger fires when the keyword first appears and can be reset for another run.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Google Docs to Big data cloud. A trigger fires from one place; an action lands in another.

Google Docs triggers

Big data cloud actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Am I Roaming API

Tool to determine if the user is roaming based on their ip address and gps coordinates. use after obtaining device location to verify roaming status before mobile actions.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

ASN Extended Receiving From Info API

Tool to return upstream providers (receivingfrom) for a given asn. use when you need a paginated list of ases feeding traffic for the specified asn.

ActionInstant

New Document Created

Triggers when a new Google Doc is created. This trigger monitors Google Docs and fires when new documents are detected. Uses timestamp filtering to efficiently poll for new documents.

TriggerPolling

ASN Extended Transit To Info API

Tool to return downstream customers (transitto) for a given asn. use when you need a paginated list of ases receiving traffic from a specific asn.

ActionInstant

Document Deleted

Triggers when an existing Google Doc is deleted (moved to trash). This trigger monitors Google Docs and fires when documents are trashed.

TriggerPolling

ASN Rank List API

Tool to fetch a ranked list of autonomous systems by ipv4 announcement volumes. use after you need to compare or analyze as ranks.

ActionInstant

Document Placeholder Filled

Triggers when a Google Doc's plain text changes such that a configured placeholder token/pattern is no longer present (i.e., the document has been filled in). This trigger monitors a specific Google Doc and fires when a placeholder pattern that was previously present is no longer found in the document's plain text.

TriggerPolling

BGP Active Prefixes API

Tool to retrieve ipv4 or ipv6 prefixes currently announced on bgp. use when inspecting bgp routing announcements for a given asn.

ActionInstant

Document Search Update

Triggers when a Google Doc matching a user-defined search query is newly created or updated since the last poll. This trigger uses timestamp filtering to efficiently monitor documents.

TriggerPolling

Reverse Geocoding With Timezone API

Tool to return reverse geocoding and time zone info for given coordinates. use when you need both locality details and timezone data in one call.

ActionInstant

Document Structure Changed

Triggers when a Google Doc's structure changes (headers/footers added/removed, tables/images count changes). This trigger monitors a specific document for structural changes like: - Headers added or removed - Footers added or removed - Tables added or removed - Images (inline objects) added or removed - Positioned objects added or removed - Footnotes added or removed

TriggerPolling

Country by IP Address API

Tool to geolocate an ip address and retrieve country details and demographics. use when you need country-level data after obtaining the target ip address.

ActionInstant

Document Updated

Triggers when an existing Google Doc is updated or modified. This trigger monitors Google Docs and fires when documents are updated.

TriggerPolling

Country Info API

Tool to fetch detailed country information by iso code. use when you need localized names, currencies, regions, and other metadata for a country.

ActionInstant

Connect any two apps with Notis in the middle.

Google Docs and Big data cloud, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Big data cloud.