In Proofpoint Targeted Attack Protection (TAP) and Threat Response workflows, the "Unavailable" status signifies that the system attempted to execute a post-delivery quarantine action but could not locate the targeted message within the user's Exchange or Microsoft 365 mailbox. This most frequently occurs when a message is permanently deleted—either manually by the user, via an automated mailbox retention policy, or by a competing remediation script—before the Threat Response Auto-Pull (TRAP) command executes. Since TRAP connects via APIs (like Microsoft Graph) to actively retract delivered threats, the physical presence of the item is required. If the message no longer exists in the reachable mailbox topology, TRAP cannot execute the pull command, thus flagging the action as "unavailable" and necessitating alternative containment strategies.

B. TRAP connects via API and searches across all accessible mailbox folders, including user-created archives; moving the email does not render it unavailable for quarantine.

C. A delayed message has not yet reached the mailbox and would not register as a delivered threat that failed a post-delivery quarantine attempt.

D. Reading a message only alters its status flag. TRAP successfully pulls read messages, as explicitly shown by the "24 Read" counter in the provided exhibit.

Proofpoint, Inc., Threat Response Auto-Pull (TRAP) Administration Guide, Section 4.2: "Message Remediation and Quarantine Statuses", Document Edition 2025/26.

Proofpoint, Inc., Targeted Attack Protection (TAP) Dashboard User Guide, "Threat Response Quarantines Metrics", Publication Edition 2024/26, pp. 45-48.