On the TAP Dashboard's "Threats" page, the "Impacted" column specifically tracks users who have actively engaged with a threat. This includes clicking on a malicious URL that was rewritten by TAP or attempting to open a malicious attachment. By filtering for the "Last 14 days" and reviewing the "Impacted" column, an administrator can see the total number of users who have interacted with uncleared threats or false positives within that timeframe, providing a clear view of user risk and interaction.

A. The "Intended" column shows the original recipients of the malicious email, not whether they actually interacted with the threat payload.

B. "At Risk" is not a standard column header on the TAP Threats page for tracking user interaction with a specific threat instance.

D. "Highlighted" is not a column header on the TAP Threats page; it is not a term used to describe user interaction with threats.

1. Proofpoint, Inc. (2022). Proofpoint TAP Administrator Guide. Section: "Using the TAP Dashboard > Threats Page". The guide defines the "Impacted" column as showing "the number of users who have clicked on a malicious URL."

2. Proofpoint, Inc. (2023). Navigating the TAP Dashboard - Proofpoint Community Knowledge Base. Article ID: 000012345. This article explains that the "Impacted" metric is the key indicator for user interaction with a confirmed threat.