Configures Proofpoint TAP for email sandboxing to detonate suspicious attachments and URLs, detecting zero-day malware and evasion. Covers integration, monitoring, and SIEM setup.
npx claudepluginhub killvxk/cybersecurity-skills-zhThis skill uses the workspace's default tool permissions.
邮件沙箱在隔离环境中引爆可疑附件和 URL，以检测零日恶意软件和规避性钓鱼载荷。Proofpoint 定向攻击防护（TAP）是业界领先的解决方案，使用多阶段沙箱、URL 重写和预测分析。本技能涵盖配置 Proofpoint TAP、与邮件流集成、分析沙箱报告和调整检测策略。
Configures Proofpoint TAP for email sandboxing to detonate attachments and URLs, detecting zero-day malware and phishing. Covers policy tuning, email flow integration, and report analysis.
Configures Proofpoint TAP for email sandboxing to detonate attachments/URLs, detect zero-day malware/phishing, tune policies, and integrate with email flow.
Deploys and configures Proofpoint Email Protection as a secure email gateway to block phishing, malware, BEC, and spam before inbox delivery via MX routing or API integration with Microsoft 365/Google Workspace.
Share bugs, ideas, or general feedback.
邮件沙箱在隔离环境中引爆可疑附件和 URL，以检测零日恶意软件和规避性钓鱼载荷。Proofpoint 定向攻击防护（TAP）是业界领先的解决方案，使用多阶段沙箱、URL 重写和预测分析。本技能涵盖配置 Proofpoint TAP、与邮件流集成、分析沙箱报告和调整检测策略。
推荐附件策略：
- 引爆：.exe, .dll, .scr, .doc(m), .xls(m), .ppt(m), .pdf, .zip, .rar, .7z, .iso
- 不引爆直接封锁：.bat, .cmd, .ps1, .vbs, .js, .wsf, .hta
- 密码保护的压缩包：尝试常用密码，然后隔离
- 动态投递：投递邮件正文，暂留附件直至得出裁决