Turn Slack domain reports into Dnsfilter threat checks
Capture a suspicious domain while the conversation is fresh. Notis asks Dnsfilter to assess it and brings the response back in a run report.
Trigger
Channel Message Received
Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.
Action
Suggest Domain Threat
Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.
Why this helps
A potentially harmful domain can get buried in a busy channel before anyone checks it.
- Send reported domains for a Dnsfilter threat suggestion promptly.
- Keep the check tied to the Slack discussion that raised it.
- Reduce the need to leave Slack and manually start a separate lookup.
Setup
Build it in a few focused steps.
- 1Connect Slack and Dnsfilter to Notis once in the portal.
- 2Create an automation in the portal or ask Notis for one in plain language.
- 3Describe that messages explicitly reporting a suspicious domain should prompt a Dnsfilter threat suggestion and a concise run report.
- 4Select the Slack channel message trigger and choose where Notis should report runs.
- 5Test with one real suspicious-domain report and review the returned suggestion.
Questions about this workflow
Does this automatically block the reported domain?
No. The selected Dnsfilter action suggests a threat categorization; it does not add a domain to a block list.
Will it check every URL in Slack?
Describe a clear reporting signal in the prompt, such as a teammate explicitly flagging a domain. Review results before taking security action.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Slack to Dnsfilter. A trigger fires from one place; an action lands in another.
Slack triggers
Dnsfilter actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Create IP Address
Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Get Application Category
Tool to get basic information of a specific application category. use when you need details for a given application category id.
New Channel Created Trigger
Triggered when a new channel is created in Slack.
Get Billing Information
Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.
Channel Message Received
Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.
Get Category
Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.
Direct Message Received
Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.
Get IP Address
Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.
Message Reaction Added
Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.
List All Categories
Tool to list all categories including internal categories. use when you need the complete set of filtering categories.
Message Reaction Removed
Triggered when a reaction is removed from a message in Slack. Supports optional filtering by channel and emoji name.
List All IP Addresses
Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.
Reaction Added Trigger
DEPRECATED: use `SLACK_MESSAGE_REACTION_ADDED` instead. Triggered when a reaction is added to a message in Slack.
List All MAC Addresses
Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.
Connect any two apps with Notis in the middle.
Slack and Dnsfilter, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.