Suggestions For Proofpoint TAP workflow?

InsightConnect Workflows
1

Seeing that this is a simple example use of the TAP plugin in a workflow, any suggestions on how to add on to it?

  1. new email for TAP alert
  2. TAP plugin parses email
  3. ??
  4. $$$, success!
2

Hi @hayden_redd, a few things I have seen other users do is use the sender and subject outputs to perform compliance searches, purges or even create transport rules to block traffic using https://extensions.rapid7.com/extension/microsoft_office365_email_security!

2 Likes