Read Compromised User
Get users which were most attacked during a specified period in their organizations.
Options
| Field | Definition | Type | Required |
|---|---|---|---|
|
Window |
Choose from available time windows. |
Dropdown |
TRUE |
Output
| Field | Definition | Type |
|---|---|---|
|
Total VAP Users |
Number of Very Attacked Persons (VAPs). |
Number |
|
Interval |
Time interval in ISO 8601 format that the response was calculated for. |
Text |
|
Average Attack Index |
Average attack index value. |
Number |
|
VAP Attack Index Threshold |
Attack index threshold for this interval; users above this threshold are considered to be VAPs. |
Number |
|
Users - Identity |
||
|
GUID |
Unique Proofpoint identifier. |
Text |
|
Customer User ID |
Identifier associated with the user that was provided by customer. |
Text |
|
Emails |
List of email addresses associated with user. |
Object |
|
Name |
Name of the user. |
Text |
|
Department |
User's department. |
Text |
|
Location |
User's location. |
Text |
|
Title |
Job title of the user. |
Text |
|
VIP |
true if user is considered to be a VIP. |
True/False |
|
Users - Threat Statistics |
||
|
Attack Index |
User's attack index value for the specified period. |
Text |
|
Families |
A collection of threat families, with each entry containing the name and threat score for that family. |
Object |