Proofpoint CASB

Cyderes supports the ingestion of Proofpoint CASB system events and alerts. Proofpoint CASB is a Cloud Access Security Broker that helps secure applications such as Microsoft Office 365, Google Workspace, Box, and more.

Chronicle Data Types

• PROOFPOINT_CASB

Requirements

The provided credentials must have access to alerts and events from the CASB v1 and v2 API.

Configuration

Configuration via the CASB user interface must occur in order to generate alerts.

Gather Information

Please send the following to Cyderes when setup is completed:

• Client ID
• Client Secret
• API Key
• Proofpoint API Hostname (which region)