Proofpoint Account Takeover Protection detects and remediates compromised email and cloud accounts by automatically reverting malicious changes made by threat actors and removing attackers' persistent access. The solution monitors mailbox rules for unauthorized modifications that attackers commonly use to hide their presence before staging attacks. It uses machine learning to detect, investigate and remediate account takeovers. The platform identifies and revokes malicious third-party applications that enable attackers to control accounts without detection. Incident responders can automatically or manually delete malicious files inserted by attackers into the environment.
