ProofpointPOD - High risk message not discarded

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Detects when email with high risk score was not rejected or discarded by filters.

Attribute Value
Type Analytic Rule
Solution Proofpoint On demand(POD) Email Security
ID c7cd6073-6d2c-4284-a5c8-da27605bdfde
Severity Low
Status Available
Kind Scheduled
Tactics InitialAccess
Techniques T1566
Required Connectors ProofpointPOD
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
ProofpointPODMailLog_CL ? ?
ProofpointPODMessage_CL ? ?
ProofpointPOD_maillog_CL 🔶 ? ?
ProofpointPOD_message_CL 🔶 ? ?
maillog_CL 🔶 ? ?
message_CL 🔶 ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Proofpoint On demand(POD) Email Security