Read Compromised User
Get users which were most attacked during a specified period in their organizations.
Options
| Field | Definition | Type | Required | 
|---|---|---|---|
| 
                                                                         Window  | 
                                                                    
                                                                         Choose from available time windows.  | 
                                                                    Dropdown | TRUE | 
Output
| Field | Definition | Type | 
|---|---|---|
| 
                                                                         Total VAP Users  | 
                                                                    
                                                                         Number of Very Attacked Persons (VAPs).  | 
                                                                    Number | 
| 
                                                                         Interval  | 
                                                                    
                                                                         Time interval in ISO 8601 format that the response was calculated for.  | 
                                                                    Text | 
| 
                                                                         Average Attack Index  | 
                                                                    
                                                                         Average attack index value.  | 
                                                                    Number | 
| 
                                                                         VAP Attack Index Threshold  | 
                                                                    
                                                                         Attack index threshold for this interval; users above this threshold are considered to be VAPs.  | 
                                                                    Number | 
| 
                                                                         Users - Identity  | 
                                                                ||
| 
                                                                         GUID  | 
                                                                    
                                                                         Unique Proofpoint identifier.  | 
                                                                    Text | 
| 
                                                                         Customer User ID  | 
                                                                    
                                                                         Identifier associated with the user that was provided by customer.  | 
                                                                    Text | 
| 
                                                                         Emails  | 
                                                                    
                                                                         List of email addresses associated with user.  | 
                                                                    Object | 
| 
                                                                         Name  | 
                                                                    Name of the user. | Text | 
| 
                                                                         Department  | 
                                                                    
                                                                         User's department.  | 
                                                                    Text | 
| 
                                                                         Location  | 
                                                                    
                                                                         User's location.  | 
                                                                    Text | 
| 
                                                                         Title  | 
                                                                    Job title of the user. | Text | 
| 
                                                                         VIP  | 
                                                                    
                                                                         true if user is considered to be a VIP.  | 
                                                                    True/False | 
| 
                                                                         Users - Threat Statistics  | 
                                                                ||
| 
                                                                         Attack Index  | 
                                                                    
                                                                         User's attack index value for the specified period.  | 
                                                                    Text | 
| 
                                                                         Families  | 
                                                                    
                                                                         A collection of threat families, with each entry containing the name and threat score for that family.  | 
                                                                    Object | 
