Proofpoint Email Protection
Email security — Proofpoint
What is this product?
A gateway that inspects every message before it reaches an employee's inbox, then blocks, quarantines or delivers it, with a classification explaining the decision.
About the company
A US company specialising in email protection and phishing awareness training, and one of the best-known names in the field.
What does an analyst do inside it?
- Reads the message headers and compares the displayed sender with the real one.
- Checks the links and attachments recorded in the log.
- Searches for the same message in other employees' mailboxes.
- Quarantines the message, or releases it when it turns out legitimate.
Its search language
These examples are written in the syntax the product itself accepts.
- fromAddress: billing@example.com
- action: quarantine
The field names it uses
- fromAddress
- recipient
- subject
- action
- classification
- senderIP
Practise it now
Pick this product inside the simulator and the field names, search language, severity wording and response actions all switch to match how it works.
Open the simulatorWhere does it show up in the job market?
Email drives most SOC alerts, so analysing a phishing message is one of the first skills asked of a junior analyst.
Tools in the same category
The content is educational and follows the product's style. ShiftZero is not affiliated with the vendor and does not run its software.