Proofpoint Targeted Attack Protection (TAP) detects, analyzes and blocks advanced threats targeting users through email. The solution stops known and unknown attacks by detecting polymorphic malware, weaponized documents, credential phishing and other advanced techniques. TAP identifies threats that use malicious attachments and URLs to install malware on devices or trick users into sharing passwords or sensitive information. The platform monitors cloud app activity to identify suspicious logins, file sharing, and third-party applications. TAP inspects the entire attack chain using static and dynamic techniques, analyzing potential threats through multiple approaches to examine behavior, code, and protocol. The system collects, analyzes and correlates data points across email, cloud, network, endpoint and social networking sources. TAP can be deployed as a cloud service, virtual appliance, or hardware appliance and integrates with the Proofpoint email security platform. The solution includes a web-based dashboard that provides data at organizational, threat and user levels with detailed forensic information on individual threats and campaigns. TAP protects users across any network or device and integrates with Email Protection and cloud-based services to defend against threats through email, URLs, attachments, and email SaaS applications.