Integrate Proofpoint Targeted Attack Protection (TAP) with Red Canary

Proofpoint Targeted Attack Protection (TAP) is a powerful tool designed to shield your organization from advanced email-borne threats. When combined with Red Canary's advanced threat hunting and incident response capabilities, you create a formidable defense against sophisticated cyberattacks.

By integrating TAP with Red Canary, you can enhance threat detection, accelerate incident response, and gain deeper insights into your organization’s security posture. To integrate Proofpoint Targeted Attack Protection (TAP) with Red Canary, follow the procedure below from beginning to end.

For more information on how to generate your TAP Service Credentials, see Generate TAP Service Credentials.

Red Canary–Enter your TAP Service Credentials

Enter your Proofpoint TAP Service Credentials to start receiving TAP alerts in Red Canary.

1. From your Red Canary homepage, click Integrations. If you do not see the required integration, click See all integrations.

   

2. In the search bar, type and select Proofpoint Targeted Attack Protection.

   

3. Click Configure.

   

4. Enter a Name.  

5. Under the Ingest Format/Method dropdown, select Proofpoint Tap via API Poll.

6. Enter your Proofpoint Tap Service Principal.

7. Enter your Proofpoint TAP Service Secret.

8. Click Save Configuration.

9. Click Edit Configuration.

10. Click Activate.