Proofpoint TAP Modular Input

The Proofpoint TAP Modular Input add-on enables a seamless integration between Proofpoint’s Targeted Attack Protection (TAP) service and Splunk. This allows security operations professionals to simplify their workflow by ingesting TAP events for the following scenarios into Splunk: • Blocked or permitted clicks to threats recognized by Proofpoint URL Defense • Blocked or delivered messages that contain threats recognized by Proofpoint URL Defense or Proofpoint Attachment Defense Documentation about the structure and meaning each event produced by the can be found here: https://help.proofpoint.com/Threat_Insight_Dashboard/API_Documentation/SIEM_API