Vendor: Proofpoint

July 25, 2023 · View on GitHub

Product: Proofpoint TAP

RulesModelsMITRE TTPsEvent TypesParsers
3817444
Use-CaseEvent Types/ParsersMITRE TTPContent
Data Exfiltrationdlp-email-alert-in
↳cef-proofpoint-email-in
↳s-proofpoint-email-in-1
↳s-proofpoint-email-alert-3
↳s-proofpoint-email-in
↳proofpoint-email-1
↳proofpoint-email-2
↳proofpoint-email-3
↳json-s-proofpoint-email-alert-2
↳s-proofpoint-email-alert-2

dlp-email-alert-in-failed
↳proofpoint-email-1
↳proofpoint-email-2
↳proofpoint-email-3

dlp-email-alert-out
↳cef-proofpoint-email-in
↳s-proofpoint-email-in-1
↳s-proofpoint-email-in
↳proofpoint-email-1
↳proofpoint-email-2
↳proofpoint-email-3
↳json-s-proofpoint-email-alert-2
↳s-proofpoint-email-alert-2

dlp-email-alert-out-failed
↳proofpoint-email-1
↳proofpoint-email-2
↳proofpoint-email-3
T1048 - Exfiltration Over Alternative Protocol
  • 1 Rules
  • 1 Models
Data Leakdlp-email-alert-in
↳cef-proofpoint-email-in
↳s-proofpoint-email-in-1
↳s-proofpoint-email-alert-3
↳s-proofpoint-email-in
↳proofpoint-email-1
↳proofpoint-email-2
↳proofpoint-email-3
↳json-s-proofpoint-email-alert-2
↳s-proofpoint-email-alert-2

dlp-email-alert-in-failed
↳proofpoint-email-1
↳proofpoint-email-2
↳proofpoint-email-3

dlp-email-alert-out
↳cef-proofpoint-email-in
↳s-proofpoint-email-in-1
↳s-proofpoint-email-in
↳proofpoint-email-1
↳proofpoint-email-2
↳proofpoint-email-3
↳json-s-proofpoint-email-alert-2
↳s-proofpoint-email-alert-2

dlp-email-alert-out-failed
↳proofpoint-email-1
↳proofpoint-email-2
↳proofpoint-email-3
T1020 - Automated Exfiltration
T1048 - Exfiltration Over Alternative Protocol
T1048.003 - Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol
  • 33 Rules
  • 16 Models
Next Page -->>

ATT&CK Matrix for Enterprise

Initial AccessExecutionPersistencePrivilege EscalationDefense EvasionCredential AccessDiscoveryLateral MovementCollectionCommand and ControlExfiltrationImpact
Valid Accounts

Valid Accounts

Valid Accounts

Valid Accounts

Exfiltration Over Alternative Protocol

Exfiltration Over Alternative Protocol: Exfiltration Over Unencrypted/Obfuscated Non-C2 Protocol

Automated Exfiltration