Skip to content
Notis

Suggest a domain threat for resume events

Give security a fast threat triage step when recruiting activity changes.

Trigger

New Prospect Resume Attachment Added

Triggers when a new resume/attachment is added to a specific prospect profile. This trigger monitors a prospect's resume attachments and fires when new attachments are detected.

Action

Suggest Domain Threat

Tool to suggest a fqdn as a potential threat. use after identifying a suspicious domain to verify its threat categorization.

Why this helps

Suspicious recruiting domains can be noticed late when attachment activity is reviewed manually.

  • Accelerate threat triage
  • Create a consistent escalation signal
  • Keep recruiting activity connected to security

Setup

Build it in a few focused steps.

  • 1Connect Workday and Dnsfilter in Notis.
  • 2Create an automation named Resume domain threat review.
  • 3Tell Notis which FQDN to evaluate and to suggest it as a potential Dnsfilter threat when warranted.
  • 4Pick Workday's New Prospect Resume Attachment Added trigger.
  • 5Choose a report channel and test with one attachment event.

Questions about this workflow

Does this block the domain?

No. It submits a threat suggestion for later review.

Where does the FQDN come from?

Provide it in the instruction or from the event context when available.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Workday to Dnsfilter. A trigger fires from one place; an action lands in another.

Workday triggers

Dnsfilter actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Create IP Address

Tool to create a new ip address in dnsfilter. use after confirming the target network id exists.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Get Application Category

Tool to get basic information of a specific application category. use when you need details for a given application category id.

ActionInstant

Absence Balance Changed

Triggers when a worker's absence balance changes. This trigger monitors a specific worker's absence plan balance and detects any changes to the balance details including quantity available, effective date, position, or other related fields. Uses snapshot-based diffing to detect meaningful changes.

TriggerPolling

Get Billing Information

Tool to retrieve basic billing information for an organization. use when you need to obtain billing details for reporting or automation tasks.

ActionInstant

Balance Details Changed

Triggers when details of a specific balance change (quantity, accruals, adjustments, etc.). This trigger monitors a specific worker's absence plan balance and detects any changes to the balance details including quantity available, effective date, position, or other related fields. Uses snapshot-based diffing to detect meaningful field changes.

TriggerPolling

Get Category

Tool to get basic information of a specific category. use when you need to retrieve details for a category by its id.

ActionInstant

Interview Feedback Submitted or Updated

Triggers when interview feedback is submitted or updated for a specific interview. This trigger monitors a specific interview and fires when new feedback entries are detected or existing feedback is modified.

TriggerPolling

Get IP Address

Tool to get basic information of the specified ip address. use when you need to fetch metadata for a particular ip after authentication.

ActionInstant

Job Posting Changed

Triggers when a specific job posting's details change (title, status, posting dates, location, etc.). This trigger monitors a single job posting and fires when any of its fields are modified.

TriggerPolling

List All Categories

Tool to list all categories including internal categories. use when you need the complete set of filtering categories.

ActionInstant

Job Posting Questionnaire Changed

Triggers when a job posting's candidate questionnaire is added or changed. This trigger monitors a specific job posting's questionnaires and detects any changes including additions, removals, or modifications to questionnaires and questions. Uses snapshot-based diffing to detect meaningful changes.

TriggerPolling

List All IP Addresses

Tool to list all user-associated ip addresses. use when you need a comprehensive list of all ip address entries in your organization.

ActionInstant

New Absence Balance

Triggers when a new absence balance record becomes available for a worker. This trigger monitors a specific worker's absence balances and detects when new balance records appear (e.g., a new plan/bucket becomes available). Uses snapshot-based diffing to compare balance record IDs between polls.

TriggerPolling

List All MAC Addresses

Tool to list all mac addresses with basic information. use when you need to retrieve all mac address entries in your organization.

ActionInstant

Connect any two apps with Notis in the middle.

Workday and Dnsfilter, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Dnsfilter.