https://github.com/greenpau/go-proofpoint
Proofpoint API Client Library
https://github.com/greenpau/go-proofpoint
proofpoint proofpoint-tap proofpoint-tap-api
Last synced: about 1 year ago
JSON representation
Proofpoint API Client Library
- Host: GitHub
- URL: https://github.com/greenpau/go-proofpoint
- Owner: greenpau
- License: apache-2.0
- Created: 2020-11-22T01:52:01.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2020-11-23T16:35:09.000Z (over 5 years ago)
- Last Synced: 2024-05-23T00:03:51.293Z (about 2 years ago)
- Topics: proofpoint, proofpoint-tap, proofpoint-tap-api
- Language: Go
- Homepage:
- Size: 49.8 KB
- Stars: 1
- Watchers: 3
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# go-proofpoint
Proofpoint API Client Library
## Table of Contents
* [Getting Started](#getting-started)
* [References](#references)
## Getting Started
First, install `ppcli`:
```bash
go get -u github.com/greenpau/go-proofpoint/cmd/ppcli
```
Next, set environment variables for Proofpoint API Service Principal:
```bash
export PROOFPOINT_SERVICE_PRINCIPAL=8c5e8866-0062-4059-b2be-92707e4374da
export PROOFPOINT_PRINCIPAL_SECRET=f982025ecbaa8c42bec8b19c98c3ea7126241c130274cd06ac4f15cbd3ec5313737a425f
```
Alternatively, the settings could be passed in a configuration file. There are
two options:
1. The `ppcli.yaml` should be located in `$HOME/.config/ppcli` or current directory
2. Pass the location via `-config` flag
```yaml
---
service_principal: 8c5e8866-0062-4059-b2be-92707e4374da
principal_secret: f982025ecbaa8c42bec8b19c98c3ea7126241c130274cd06ac4f15cbd3ec5313737a425f
```
The following command fetches all events occured in the last 60 minutes
from Proofpoint SIEM API:
```bash
ppcli -service-name siem -service-operation all -log-level debug
```
## References
* [Threat Insight Dashboard - API Documentation](https://help.proofpoint.com/Threat_Insight_Dashboard/API_Documentation)