Critical reading · Sep 15, 2026
What the source supports
Proofpoint describes endpoint decoys for lateral-movement detection.
Question for evaluation
How is each alert linked to a real identity and endpoint?
This note is bounded by the material shown under “Review depth”. It is not an independent test.
Evidence limits
The commercial source does not quantify coverage or false alerts in a comparable organization.
Sources and provenance
- Proofpoint Shadow
source-page · 2026-09-15
Reviewed: 2026-09-15. This record may change when new evidence is found.