Using the Palo Alto Networks Application Framework we detect predictions and build personalized blocklists to proactively defend against targetted attacks.