Skip to content
Notis

Start new security channels with current threat intelligence

Create a focused Slack space and have the latest public X-Force collections ready for the team.

Trigger

New Channel Created Trigger

Triggered when a new channel is created in Slack.

Action

Get Latest Public Collections

Tool to retrieve latest public Collections from IBM X-Force Exchange. Use when you need to access publicly available collections without pagination. For fetching all public collections, consider using the paginated endpoint instead.

Why this helps

A new security channel can sit idle while someone remembers to gather useful intelligence references.

  • Gives new security discussions a shared intelligence starting point.
  • Reduces the manual step of checking X-Force after creating a channel.
  • Keeps the setup focused on publicly available collections.

Setup

Build it in a few focused steps.

  • 1Connect Slack and IBM X-Force Exchange to Notis once in the portal.
  • 2Create an automation in the portal, or ask Notis to create it conversationally.
  • 3In one plain-language instruction, ask Notis to retrieve the latest public X-Force collections when a security channel is created.
  • 4Select the Slack new channel trigger and choose where Notis should report runs.
  • 5Test by creating a real security channel and checking the run report.

Questions about this workflow

Does this retrieve every public collection?

No. It uses the latest public collections action, which retrieves the latest items without pagination.

Do I need to configure channel fields?

No. Describe the desired outcome in the automation prompt; Notis interprets the instruction.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Slack to IBM X-Force Exchange. A trigger fires from one place; an action lands in another.

Slack triggers

IBM X-Force Exchange actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Get Latest Public Collections

Tool to retrieve latest public Collections from IBM X-Force Exchange. Use when you need to access publicly available collections without pagination. For fetching all public collections, consider using the paginated endpoint instead.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Get Public Collections Paginated

Tool to retrieve all public Collections using pagination from IBM X-Force Exchange. Use when you need to access publicly available collections with pagination support. Returns a list of publicly accessible case files with pagination metadata.

ActionInstant

New Channel Created Trigger

Triggered when a new channel is created in Slack.

TriggerInstant

Get IPR Category List

Tool to retrieve the complete list of IP reputation categories from IBM X-Force Exchange. Use when you need to understand available IPR classification categories used by XFE.

ActionInstant

Channel Message Received

Triggered when a message is posted in a Slack channel (public, private, or multi-party IM). Does NOT match direct messages.

TriggerInstant

Get URL Category List

Tool to retrieve the complete list of URL categories from IBM X-Force Exchange. Use when you need to understand available URL classification categories used by XFE.

ActionInstant

Direct Message Received

Triggered when a new direct message (DM) is sent to a user in Slack. Catches all DMs across all DM channels.

TriggerInstant

Get User Profile Information

Tool to retrieve authenticated user's profile information from IBM X-Force Exchange. Use when you need to access user account details, membership statistics, or integration configurations.

ActionInstant

Message Reaction Added

Triggered when a reaction is added to a message in Slack. Supports optional filtering by channel and emoji name.

TriggerInstant

Get Current API Version

Tool to retrieve current running API version information from IBM X-Force Exchange. Use when you need to check the API version, build number, or creation date.

ActionInstant

Message Reaction Removed

Triggered when a reaction is removed from a message in Slack. Supports optional filtering by channel and emoji name.

TriggerInstant

Generate API Key and Password

Tool to generate a new API key and password pair for IBM X-Force Exchange authentication. Use when you need to create new credentials for API access. The generated credentials do not expire and can be used with Basic Authentication.

ActionInstant

Reaction Added Trigger

DEPRECATED: use `SLACK_MESSAGE_REACTION_ADDED` instead. Triggered when a reaction is added to a message in Slack.

TriggerInstant

Connect any two apps with Notis in the middle.

Slack and IBM X-Force Exchange, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business IBM X-Force Exchange.