Could have a bank of checkboxes to allow the user to "turn on" or "turn off" any of the 4 Proofpoint SIEM response sections. Should also use that to adjust the query to reduce data where possible.
Could have a bank of checkboxes to allow the user to "turn on" or "turn off" any of the 4 Proofpoint SIEM response sections.
Should also use that to adjust the query to reduce data where possible.