The Proofpoint TIS CDF integration pulls indicators collected by the Proofpoint Threat Intelligence Services (TIS) team into the ThreatQ platform. These indicators are typically related to a specific threat actor or malware campaign.

Note: This integration does not ingest the full campaign details. Full campaign data can be ingested using the Proofpoint TAP Campaigns CDF integration.

The integration provides the following feed:

• Proofpoint TIS Indicators - pulls indicators collected by Proofpoint’s TIS team.

The integration ingests the following object types:

• Campaigns
• Indicators