Proofpoint SOAR App

Splunk SOAR app that integrates with the Proofpoint Threat Protection API. It leverage the strengths of Proofpoint's email protection to automate responses to threats and improve our overall security posture

Supported Actions

• test connectivity: Validate the asset configuration for connectivity using supplied configuration
• get safelist entries: Get safe list entries
• add to safelist: Add to safe list
• delete from safelist: Delete from safe list
• get blocklist entries: Get block list entries
• add to blocklist: Add to block list
• delete from blocklist: Delete from block list