[mht-gthb]

Change(s):

• Updated connectorId from ProofpointPOD to ProofpointCCPDefinition in 10 analytic rules and 10 hunting queries
• Updated dataTypes to the CCF tables ProofpointPODMessage_CL and ProofpointPODMailLog_CL
• Updated ProofpointPODWorkbook dataConnectorsDependencies in Workbooks/WorkbooksMetadata.json to ProofpointCCPDefinition
• Bumped solution version to 3.1.5, updated ReleaseNotes.md and repackaged

Reason for Change(s):

• The Proofpoint On Demand (CCF) data connector page shows 0 workbooks, queries and analytics rule templates under Related content because content still references the legacy ProofpointPOD connector
• Same fix as applied to Proofpoint TAP in PR Update ProofpointTAP connector references to v2 #13309 (connectorId ProofpointTAPv2)

Version Updated:

• Yes (analytic rule template versions and solution version 3.1.5)

Testing Completed:

• Package generated with createSolutionV3.ps1; template loads in Azure Custom deployment
• Full deployment to a Sentinel workspace pending test environment access

Checked that the validations are passing and have addressed any issues that are present:

• ARM-TTK: removed blank innerSteps properties; remaining contentProductId check is unchanged from the current master template

[mht-gthb]

@microsoft-github-policy-service agree company="Proofpoint"