ProofpointTAP Modeling Rule

Modeling Rule

Proofpoint TAP

Details

IDProofpointTAP_ModelingRule
From Version8.3.0

Schema

proofpoint_tap_raw

Field Type Array?
GUID string —
_log_type string —
_vendor string —
ccAddresses string —
classification string —
clickIP string —
clickTime datetime —
fromAddress string —
messageID string —
messageParts string —
messageTime datetime —
recipient string —
sender string —
senderIP string —
subject string —
threatID string —
threatURL string —
threatsInfoMap string —
url string —
userAgent string —

Source

ProofpointTAPModelingRules_1_3.xif ProofpointTAPModelingRules_1_3.yml ProofpointTAPModelingRules_1_3_schema.json
Download History Raw 
fromversion: 8.3.0
id: ProofpointTAP_ModelingRule
name: ProofpointTAP Modeling Rule
rules: ''
schema: ''
supportedModules:
- xsiam