Skip to content
Notis

Turn document keywords into threat reviews

Catch risky domains when they first appear in operational documents.

Trigger

Keyword Detected in Document

Triggers when a specific keyword or phrase first appears in a Google Doc. This trigger monitors a Google Doc and fires once when the specified keyword is detected. After the keyword is found, the trigger will not fire again until reset.

Action

Suggest Domain Threat

Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.

Why this helps

Security relevant terms can appear in documents long before anyone reviews them.

  • Catch risky references early
  • Reduce document scanning
  • Create clear review prompts

Setup

Build it in a few focused steps.

  • 1Connect Google Super and Dnsfilter once.
  • 2Create an automation to inspect the keyword context and suggest a suspicious domain when supported.
  • 3Choose Keyword Detected in Document as the trigger.
  • 4Pick a report channel and test with one document occurrence.

Questions about this workflow

Does every keyword create a suggestion?

Only when your instruction finds a specific suspicious domain worth submitting.

Can it include the document context?

Yes, ask Notis to summarize the relevant passage.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Google Super to Dnsfilter. A trigger fires from one place; an action lands in another.

Google Super triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Get Application Category

Tool to get basic information of a specific application category. use when you need details for a given application category id.

ActionInstant

Aggregate Metric Changed

Triggers when an aggregate metric (SUM/COUNT/AVG/MIN/MAX) changes in a Google Sheets spreadsheet. This trigger monitors an aggregate calculation on a target column (optionally filtered by a search column/value) and fires when the calculated result changes.

TriggerPolling

Get Billing Information

Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.

ActionInstant

Attendee Response Changed

Polling trigger that fires when any attendee's RSVP changes to accepted, declined, or tentative. Returns attendee info and current status.

TriggerPolling

Get Category

Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.

ActionInstant

Cell Range Values Changed

Triggers when values in a specified A1 range change in Google Sheets. This trigger monitors a specific cell or range of cells and fires when any values change.

TriggerPolling

Get IP Address

Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.

ActionInstant

Comment Added (Docs/Sheets/Slides)

Triggers when a new comment is added to Google Docs, Sheets, or Slides.

TriggerPolling

List All Categories

Tool to list all categories including internal categories. use when you need the complete set of filtering categories.

ActionInstant

Conditional Format Rule Changed

Triggers when conditional formatting rules change in a Google Spreadsheet. Detects when rules are added, updated, or removed. Uses snapshot-based diffing to detect changes between polls.

TriggerPolling

List All IP Addresses

Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.

ActionInstant

Data Validation Rule Changed

Triggers when data validation rules change (added/updated/removed) in a Google Spreadsheet. Uses snapshot-based diffing to detect changes between polls.

TriggerPolling

List All MAC Addresses

Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.

ActionInstant

Connect any two apps with Notis in the middle.

Google Super and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.