Skip to content

Commit 8c3f308

Browse files
[SAASINT-4241] DDS: Proofpoint TAP: Crawler Integration v1.0.0 (DataDog#20587)
* Add Proofpoint TAP crawler integration without assets * Add Proofpoint TAP integration with assets * Resolve CI Failures * Resolve CI Failures * Add dashboard screenshots * Address review comments
1 parent 7ad6c3b commit 8c3f308

11 files changed

Lines changed: 5805 additions & 20 deletions

proofpoint_tap/README.md

Lines changed: 34 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -1,39 +1,54 @@
1-
# Agent Check: Proofpoint TAP
2-
31
## Overview
42

5-
This check monitors [Proofpoint TAP][1].
3+
[Proofpoint TAP (Targeted Attack Protection)][1] is a cybersecurity solution designed to detect, mitigate, and block advanced threats that target people through email. It uses a next-generation email security platform to provide visibility into all email communications.
64

7-
## Setup
5+
This integration ingests the following logs:
86

9-
### Installation
7+
- **Click Events**: These logs provide information about user interactions with links in emails, including whether clicks were permitted or blocked, along with associated threat identification.
8+
- **Message Events**: These logs provide information about email messages analyzed by Proofpoint TAP, including detection outcomes, delivery status (such as delivered or blocked), and threat identification.
109

11-
The Proofpoint TAP check is included in the [Datadog Agent][2] package.
12-
No additional installation is needed on your server.
10+
This integration gathers and forwards above mentioned events to Datadog for seamless analysis. Datadog uses its built-in log pipelines to parse and enrich these logs, facilitating easy search and detailed insights. With preconfigured dashboards, the integration offers clear visibility into activities within the Proofpoint TAP platform. Additionally, it includes ready-to-use Cloud SIEM detection rules for enhanced monitoring and security.
11+
12+
## Setup
1313

14-
### Configuration
14+
### Generate Service Credentials in Proofpoint TAP
1515

16-
!!! Add list of steps to set up this integration !!!
16+
1. Login to the **Proofpoint TAP** dashboard.
17+
2. Navigate to **Settings > Connected Applications**.
18+
3. Click **Create New Credential**.
19+
4. Name the **new credential set** and click **Generate**.
20+
5. Copy the **Service Principal** and **Secret**.
1721

18-
### Validation
22+
### Connect your Proofpoint TAP Account to Datadog
1923

20-
!!! Add steps to validate integration is functioning as expected !!!
24+
1. Add your Service Principal and Secret.
25+
| Parameters | Description |
26+
| ---------------------------- | ------------------------------------------------------------------------------------------- |
27+
| Service Principal | The Service Principal of your Proofpoint TAP account. |
28+
| Secret | The Secret of your Proofpoint TAP account. |
29+
| Get Click Blocked Events | Control the collection of Click Blocked Events from Proofpoint TAP. Enabled by default. |
30+
| Get Click Permitted Events | Control the collection of Click Permitted Events from Proofpoint TAP. Enabled by default. |
31+
| Get Message Blocked Events | Control the collection of Message Blocked Events from Proofpoint TAP. Enabled by default. |
32+
| Get Message Delivered Events | Control the collection of Message Delivered Events from Proofpoint TAP. Enabled by default. |
33+
2. Click the Save button to save your settings.
2134

2235
## Data Collected
2336

37+
### Logs
38+
39+
The Proofpoint TAP integration collects and forwards click and message events to Datadog.
40+
2441
### Metrics
2542

26-
Proofpoint TAP does not include any metrics.
43+
The Proofpoint TAP integration does not include any metrics.
2744

2845
### Events
2946

30-
Proofpoint TAP does not include any events.
31-
32-
## Troubleshooting
47+
The Proofpoint TAP integration does not include any events.
3348

34-
Need help? Contact [Datadog support][3].
49+
## Support
3550

36-
[1]: **LINK_TO_INTEGRATION_SITE**
37-
[2]: https://app.datadoghq.com/account/settings/agent/latest
38-
[3]: https://docs.datadoghq.com/help/
51+
For any further assistance, contact [Datadog support][2].
3952

53+
[1]: https://www.proofpoint.com/uk/products/advanced-threat-protection/targeted-attack-protection
54+
[2]: https://docs.datadoghq.com/help/

0 commit comments

Comments
 (0)