Skip to content
Notis

See the domains driving DNS activity

Get a focused list of top accessed domains on a schedule and decide what deserves a closer look.

Trigger

Recurring schedule

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

Action

Get Profile Analytics Top Domains

Tool to fetch top domains accessed within a specific profile. Use after confirming profile ID.

Why this helps

Finding notable domains can require repeated manual searches through network activity.

  • Bring high activity domains into one recurring report
  • Reduce time spent searching analytics
  • Support a focused review of policy needs

Setup

Build it in a few focused steps.

  • 1Connect Control D once in the Notis portal.
  • 2Create an automation for the top domains review.
  • 3In one instruction, specify the profile, date range, and how the returned domains should be summarized.
  • 4Pick a recurring schedule trigger and choose where run reports go.
  • 5Test with one real run and review the returned domains.

Questions about this workflow

Does a top domain mean it should be blocked?

No. Treat the list as review context. Define a separate, explicit decision process before changing policy.

Can I request multiple profiles?

Specify the profiles in the instruction if supported by your account and desired output; validate the first run to confirm the report scope.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link One drive to Control d. A trigger fires from one place; an action lands in another.

One drive triggers

Control d actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Delete Device by ID

Tool to delete a Control-D device. Use when you need to remove a device by its identifier after confirming the device_id.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Delete Profile by ID

Tool to delete a profile. Use when you need to remove a profile by its ID after ensuring it is not enforced by any device.

ActionInstant

Onedrivebasetrigger

Base trigger for OneDrive changes using Gmail-style state management. Subclasses override `filter_changes(...)` to extract only the relevant items.

TriggerPolling

Delete Profile Rule by Hostname

Tool to delete a specific custom rule by hostname from a profile. Use after confirming profile_id and hostname.

ActionInstant

OneDrive File Created Trigger

Triggers when a new file is created in OneDrive. Uses Gmail-style state management for reliable duplicate prevention.

TriggerPolling

Delete Profile Rule by Rule ID

Tool to delete a specific custom rule by its ID within a profile. Use after confirming profile_id and rule_id.

ActionInstant

File Updated

Trigger that fires when a OneDrive file's content or metadata changes. Returns file ID, last modified time, and modifier info.

TriggerPolling

Delete Profile Rule in Folder

Tool to delete a specific custom rule within a folder. Use after confirming profile_id, rule_id, and folder_id.

ActionInstant

OneDrive Folder Created Trigger

Triggers when a new folder is created in OneDrive. Uses Gmail-style state management for reliable duplicate prevention.

TriggerPolling

Delete Profile Schedule

Tool to delete a specific schedule within a profile. Use after confirming profile_id and schedule_id.

ActionInstant

OneDrive Item Deleted Trigger

Triggers when a file or folder is deleted in OneDrive. Uses Gmail-style state management for reliable duplicate prevention.

TriggerPolling

List Known Access IPs

Tool to list known IPs associated with the account. Use when you need to retrieve recent access IPs for device resolver queries.

ActionInstant

Item Moved or Renamed

Triggers when a file or folder is moved to a different path or renamed in OneDrive. Includes both old and new path/name data in the payload.

TriggerPolling

Get Analytics Endpoints

Tool to list analytics storage regions and their endpoints. Use after authenticating to retrieve available analytics regions.

ActionInstant

Connect any two apps with Notis in the middle.

One drive and Control d, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Control d.