Read Compromised User
Get users which were most attacked during a specified period in their organizations.
Options
| Field | Definition | Type | Required |
|---|---|---|---|
| Window | Choose from available time windows. |
Dropdown |
TRUE |
Output
| Field | Definition | Type |
|---|---|---|
| Total VAP Users | Number of Very Attacked Persons (VAPs). |
Number |
| Interval | Time interval in ISO 8601 format that the response was calculated for. |
Text |
| Average Attack Index | Average attack index value. |
Number |
| VAP Attack Index Threshold | Attack index threshold for this interval; users above this threshold are considered to be VAPs. |
Number |
| Users - Identity | ||
| GUID | Unique Proofpoint identifier. |
Text |
| Customer User ID | Identifier associated with the user that was provided by customer. |
Text |
| Emails | List of email addresses associated with user. |
Object |
| Name |
Name of the user. |
Text |
| Department | User's department. |
Text |
| Location | User's location. |
Text |
| Title |
Job title of the user. |
Text |
| VIP | true if user is considered to be a VIP. |
True/False |
| Users - Threat Statistics | ||
| Attack Index | User's attack index value for the specified period. |
Text |
| Families | A collection of threat families, with each entry containing the name and threat score for that family. |
Object |