Proofpoint Threat Response Features
Response (8)
-
Resolution Automation
Diagnose and resolve incidents without the need for human interaction.
Resolution Guidance
Guide users through the resolution process and give specific instructions to remedy individual occurrences.
-
System Isolation
Cuts off network connection or temporarily inactivate applications until incidents are remedied.
-
Threat Intelligence
Gathers information related to threats in order to gain further information on remedies.
Incident Investigation
Analyzes incidents, correlates related events, and determines the scope and impact of attacks.
Alerting
Clearly notifies users with relevant information and anomalies in a timely manner.
Performance Baselin
Sets a standard performance baseline by which to compare log activity.
High Availability/Disaster Recovery
Allows platform to scale to size of desired environment and configured with high availability and disaster recovery capabilities.
Records (2)
Incident Logs
Information on each incident is stored in databases for user reference and analytics.
Incident Reports
Produces reports detailing trends and vulnerabilities related to their network and infrastructure.
Management (3)
Incident Alerts
Gives alerts when incidents arise. Some responses may be automated, but users will still be informed.
Incident Case Management
Ability to track incidents, tasks, evidence, and investigation progress within a structured case.
Workflow Management
Administrators can organize workflows to guide remedies to specific situations incident types.
Automation (4)
Workflow Mapping
Visually displays connected applications and integrated data. Allows customization and management of workflow structures.
Workflow Automation
Streamline the flow of work processes by establishing triggers and alerts that notify and route information to the appropriate people when their action is required within the compensation process.
Automated Remediation
Reduces time spent remedying issues manually. Resolves common network security incidents quickly.
Log Monitoring
Constantly monitors logs to detect anomalies in real time.
Orchestration (4)
Security Orchestration
Integrates additional security tools to automate security and incident response processes.
Data Collection
Collects information from multiple sources to cross reference and build contextual to correlate intelligence.
Threat Intelligence
Stores information related to common threats and how to resolve them once incidents occur.
Data Visualization
Offer pre-built and custom reporting and dashboards for quick insights into system states.
Generative AI (3)
AI Text Generation
Allows users to generate text based on a text prompt.
AI Text Summarization
Condenses long documents or text into a brief summary.
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Additional Functionality (37)
SSL Security
Security protocol that ensures secure, encrypted communication over the internet, safeguarding sensitive data from unauthorized access
HIPAA Compliant
Compliant with HIPAA, which sets standards for sensitive patient data protection
API
Application programming interface that allows for integration with other systems/databases
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Endpoint Protection
Protect users working remotely and provide secure environments for personal devices to access company programs
Maintenance Scheduling
Schedule predetermined or ad hoc maintenance services and labor requests
Third-Party Integrations
Set up connections to third-party platforms to improve business processes
Security Auditing
Systematic evaluation of the security of a company's overall security system and situation
Application Security
Identify and respond to security threats to developed applications
Encryption
Convert data into a code for security
Network Security
Prevent and monitor unauthorized access, misuse, modification, or denial of a computer network and network-accessible resources
Real-Time Reporting
Active reporting of data and metrics
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Authentication
Verify the identity of users/devices to enable secure access
Financial Data Protection
Anti Virus
Prevents, detects and removes malware
Secure Data Storage
Securely stores data to prevent data loss or breaches
Virus Definition Update
Activity Dashboard
Dashboard to view the status of ongoing processes, identify current incidents and track past activities
VPN
Extend virtual private network over public networks to enable protected information exchange
Audit Trail
A record of all activities within the system, including user access, changes made, etc.
Anti Spam
Techniques to prevent and filter unwanted or unsolicited email spam from reaching a user's inbox
Access Controls/Permissions
Define levels of authorization for access to specific files or systems
Data Visualization
Graphical representation of data
Alerts/Escalation
System alerts about the need to escalate an issue or request
Data Security
Protect sensitive data for digital privacy
Generative AI
Use AI to generate content in the form of text, images, videos, etc.
Collaboration Tools
Provides a channel for team members to share media files, communicate, and work together
Incident Management
Manage and track all disruptions and incidents
AI Copilot
A virtual assistant that uses AI to pursue goals and complete tasks on behalf of users
Reporting/Analytics
View and track pertinent metrics to find patterns and gain insights from data
Threat Response
Identifying, analyzing, and mitigating security issues and taking appropriate action to protect systems and data from potential harm
Key Performance Indicators
Quantifiable metrics to track objectives, gauge milestones, and evaluate the success of a particular activity
Risk Alerts
Notifying as a warning or reminder of a potential or imminent hazard
Performance Metrics
A set of indicators that tracks the performance of networks, applications, systems, teams, etc.
Third-Party Integrations
Set up connections to third-party platforms to improve business processes