Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Table of Contents
minLevel2
maxLevel2
typeflat

Overview

-Proofpoint Targeted Attack Protection (TAP) helps you stay ahead of attackers with an innovative approach that detects, analyzes and blocks advanced threats.

Devo collector features

Feature

Details

Allow parallel downloading (multipod)

not allowed

Running environments

  • collector server

  • on-premise

Populated Devo events

table

Flattening preprocessing

no

...

Data source

Description

API endpoint

Collector service name

Devo table

Available from release

Blocked clicks

Fetch events for clicks to malicious URLs blocked in the specified time period

/v2/siem/clicks/blocked

clicksBlocked

mail.proofpoint.tapsiem_v2.clicksblocked

v2.1.1

Permitted clicks

Fetch events for clicks to malicious URLs permitted in the specified time period

/v2/siem/clicks/permitted

clicksPermitted

mail.proofpoint.tapsiem_v2.clickspermitted

v2.1.1

Blocked messages

Fetch events for messages blocked in the specified time period that contained a known threat.

/v2/siem/messages/blocked

messagesBlocked

mail.proofpoint.tapsiem_v2.messagesblocked

v2.1.1

Delivered message

Fetch events for messages delivered in the specified time period which contained a known threat.

/v2/siem/messages/delivered

messagesDelivered

mail.proofpoint.tapsiem_v2.messagesdelivered

v2.1.1

...