proofpoint casb
Expression
product = proofpoint casb
Fields
There are no fields for this extension.
Activity Types
| Activity Type | Field | Status | Core | Detection | Informational |
|---|---|---|---|---|---|
| alert-trigger | email_attachment | ||||
| file_name | Legacy | ✓ | |||
| email_attachments | |||||
| target | |||||
| src_ip | Legacy | ✓ | ✓ | ||
| result | |||||
| email_address | |||||
| email_user | |||||
| sender | Legacy | ✓ | |||
| bytes | Legacy | ✓ | |||
| recipients | |||||
| dest_ip | Legacy | ✓ | ✓ | ||
| alert_id | Legacy | ✓ | |||
| recipient | |||||
| user | Legacy | ✓ | |||
| email_subject |