ProofpointPOD - Suspicious file types in attachments

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Hunting for suspicious file types in attachments.

Attribute Value
Type Hunting Query
Solution Proofpoint On demand(POD) Email Security
ID 7b281f4a-6a9a-439f-8b4f-f08eb24f2fb7
Tactics InitialAccess
Required Connectors ProofpointPOD
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
ProofpointPODMailLog_CL ? ?
ProofpointPODMessage_CL ? ?
ProofpointPOD_maillog_CL 🔶 ? ?
ProofpointPOD_message_CL 🔶 ? ?
maillog_CL 🔶 ? ?
message_CL 🔶 ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Hunting Queries · Back to Proofpoint On demand(POD) Email Security