proofpoint

Every TAP Threat Insight endpoint, plus a local threat store that answers the cross-endpoint questions — who is both attacked and clicking, what touched this user — inside Proofpoint's punishing daily quotas. Trigger phrases: pull proofpoint siem events, who are my VAPs, decode this urldefense link, proofpoint incident brief, top clickers this month, use proofpoint, run proofpoint-cli.