Skip to content

Commit 06a2d48

Browse files
v-prasadbokev-prasadboke
authored
Merge pull request Azure#12076 from Azure/v-sudkharat/Fix-ProofPointTAB
Fix-ProofPointTAP CCP Deployment Issue
2 parents a49751d + 60d6ce6 commit 06a2d48

File tree

4 files changed

+30
-29
lines changed

4 files changed

+30
-29
lines changed

‎Solutions/ProofPointTap/Data Connectors/ProofpointTAP_CCP/ProofpointTAP_DCR.json

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -401,7 +401,7 @@
401401
"destinations": [
402402
"clv2ws1"
403403
],
404-
"transformKql": "source\n| extend TimeGenerated = todatetime\n",
404+
"transformKql": "source\n| extend TimeGenerated = now()\n",
405405
"outputStream": "Custom-ProofPointTAPClicksBlockedV2_CL"
406406
},
407407
{
@@ -411,7 +411,7 @@
411411
"destinations": [
412412
"clv2ws1"
413413
],
414-
"transformKql": "source\n| extend TimeGenerated = todatetime\n",
414+
"transformKql": "source\n| extend TimeGenerated = now()\n",
415415
"outputStream": "Custom-ProofPointTAPMessagesBlockedV2_CL"
416416
},
417417
{
@@ -421,7 +421,7 @@
421421
"destinations": [
422422
"clv2ws1"
423423
],
424-
"transformKql": "source\n| extend TimeGenerated = todatetime\n",
424+
"transformKql": "source\n| extend TimeGenerated = now()\n",
425425
"outputStream": "Custom-ProofPointTAPMessagesDeliveredV2_CL"
426426
},
427427
{
@@ -431,7 +431,7 @@
431431
"destinations": [
432432
"clv2ws1"
433433
],
434-
"transformKql": "source\n| extend TimeGenerated = todatetime\n",
434+
"transformKql": "source\n| extend TimeGenerated = now()\n",
435435
"outputStream": "Custom-ProofPointTAPClicksPermittedV2_CL"
436436
}
437437
]

‎Solutions/ProofPointTap/Package/3.0.7.zip

41.9 KB
Binary file not shown.

‎Solutions/ProofPointTap/Package/mainTemplate.json

Lines changed: 25 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@
5555
"email": "[email protected]",
5656
"_email": "[variables('email')]",
5757
"_solutionName": "ProofPointTap",
58-
"_solutionVersion": "3.0.6",
58+
"_solutionVersion": "3.0.7",
5959
"solutionId": "azuresentinel.azure-sentinel-proofpoint",
6060
"_solutionId": "[variables('solutionId')]",
6161
"uiConfigId1": "ProofpointTAP",
@@ -147,7 +147,7 @@
147147
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
148148
],
149149
"properties": {
150-
"description": "ProofPointTap data connector with template version 3.0.6",
150+
"description": "ProofPointTap data connector with template version 3.0.7",
151151
"mainTemplate": {
152152
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
153153
"contentVersion": "[variables('dataConnectorVersion1')]",
@@ -1206,7 +1206,7 @@
12061206
"destinations": [
12071207
"clv2ws1"
12081208
],
1209-
"transformKql": "source\n| extend TimeGenerated = todatetime\n",
1209+
"transformKql": "source\n| extend TimeGenerated = now()\n",
12101210
"outputStream": "Custom-ProofPointTAPClicksBlockedV2_CL"
12111211
},
12121212
{
@@ -1216,7 +1216,7 @@
12161216
"destinations": [
12171217
"clv2ws1"
12181218
],
1219-
"transformKql": "source\n| extend TimeGenerated = todatetime\n",
1219+
"transformKql": "source\n| extend TimeGenerated = now()\n",
12201220
"outputStream": "Custom-ProofPointTAPMessagesBlockedV2_CL"
12211221
},
12221222
{
@@ -1226,7 +1226,7 @@
12261226
"destinations": [
12271227
"clv2ws1"
12281228
],
1229-
"transformKql": "source\n| extend TimeGenerated = todatetime\n",
1229+
"transformKql": "source\n| extend TimeGenerated = now()\n",
12301230
"outputStream": "Custom-ProofPointTAPMessagesDeliveredV2_CL"
12311231
},
12321232
{
@@ -1236,7 +1236,7 @@
12361236
"destinations": [
12371237
"clv2ws1"
12381238
],
1239-
"transformKql": "source\n| extend TimeGenerated = todatetime\n",
1239+
"transformKql": "source\n| extend TimeGenerated = now()\n",
12401240
"outputStream": "Custom-ProofPointTAPClicksPermittedV2_CL"
12411241
}
12421242
]
@@ -1879,15 +1879,15 @@
18791879
"parameters": {
18801880
"guidValue": {
18811881
"defaultValue": "[[newGuid()]",
1882-
"type": "string"
1882+
"type": "securestring"
18831883
},
18841884
"innerWorkspace": {
18851885
"defaultValue": "[parameters('workspace')]",
1886-
"type": "string"
1886+
"type": "securestring"
18871887
},
18881888
"username": {
1889-
"defaultValue": "Enter username value",
1890-
"type": "string",
1889+
"defaultValue": "-NA-",
1890+
"type": "securestring",
18911891
"minLength": 4
18921892
},
18931893
"password": {
@@ -1897,12 +1897,12 @@
18971897
},
18981898
"connectorDefinitionName": {
18991899
"defaultValue": "Proofpoint TAP (via Codeless Connector Platform) (Preview)",
1900-
"type": "string",
1900+
"type": "securestring",
19011901
"minLength": 1
19021902
},
19031903
"workspace": {
19041904
"defaultValue": "[parameters('workspace')]",
1905-
"type": "string"
1905+
"type": "securestring"
19061906
},
19071907
"dcrConfig": {
19081908
"defaultValue": {
@@ -2114,7 +2114,7 @@
21142114
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
21152115
],
21162116
"properties": {
2117-
"description": "ProofpointTAPEvent Data Parser with template version 3.0.6",
2117+
"description": "ProofpointTAPEvent Data Parser with template version 3.0.7",
21182118
"mainTemplate": {
21192119
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
21202120
"contentVersion": "[variables('parserObject1').parserVersion1]",
@@ -2246,7 +2246,7 @@
22462246
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
22472247
],
22482248
"properties": {
2249-
"description": "MalwareAttachmentDelivered_AnalyticalRules Analytics Rule with template version 3.0.6",
2249+
"description": "MalwareAttachmentDelivered_AnalyticalRules Analytics Rule with template version 3.0.7",
22502250
"mainTemplate": {
22512251
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
22522252
"contentVersion": "[variables('analyticRuleObject1').analyticRuleVersion1]",
@@ -2274,10 +2274,10 @@
22742274
"status": "Available",
22752275
"requiredDataConnectors": [
22762276
{
2277+
"connectorId": "ProofpointTAP",
22772278
"dataTypes": [
22782279
"ProofPointTAPMessagesDelivered_CL"
2279-
],
2280-
"connectorId": "ProofpointTAP"
2280+
]
22812281
}
22822282
],
22832283
"tactics": [
@@ -2387,7 +2387,7 @@
23872387
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
23882388
],
23892389
"properties": {
2390-
"description": "MalwareLinkClicked_AnalyticalRules Analytics Rule with template version 3.0.6",
2390+
"description": "MalwareLinkClicked_AnalyticalRules Analytics Rule with template version 3.0.7",
23912391
"mainTemplate": {
23922392
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
23932393
"contentVersion": "[variables('analyticRuleObject2').analyticRuleVersion2]",
@@ -2415,10 +2415,10 @@
24152415
"status": "Available",
24162416
"requiredDataConnectors": [
24172417
{
2418+
"connectorId": "ProofpointTAP",
24182419
"dataTypes": [
24192420
"ProofPointTAPClicksPermitted_CL"
2420-
],
2421-
"connectorId": "ProofpointTAP"
2421+
]
24222422
}
24232423
],
24242424
"tactics": [
@@ -2537,7 +2537,7 @@
25372537
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
25382538
],
25392539
"properties": {
2540-
"description": "ProofpointTAP Workbook with template version 3.0.6",
2540+
"description": "ProofpointTAP Workbook with template version 3.0.7",
25412541
"mainTemplate": {
25422542
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
25432543
"contentVersion": "[variables('workbookVersion1')]",
@@ -2637,7 +2637,7 @@
26372637
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
26382638
],
26392639
"properties": {
2640-
"description": "ProofpointTAPConnector Playbook with template version 3.0.6",
2640+
"description": "ProofpointTAPConnector Playbook with template version 3.0.7",
26412641
"mainTemplate": {
26422642
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
26432643
"contentVersion": "[variables('playbookVersion1')]",
@@ -3607,7 +3607,7 @@
36073607
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
36083608
],
36093609
"properties": {
3610-
"description": "Get-ProofpointTAPEvents Playbook with template version 3.0.6",
3610+
"description": "Get-ProofpointTAPEvents Playbook with template version 3.0.7",
36113611
"mainTemplate": {
36123612
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
36133613
"contentVersion": "[variables('playbookVersion2')]",
@@ -3909,7 +3909,7 @@
39093909
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
39103910
],
39113911
"properties": {
3912-
"description": "ProofpointTAP-AddForensicsInfoToIncident Playbook with template version 3.0.6",
3912+
"description": "ProofpointTAP-AddForensicsInfoToIncident Playbook with template version 3.0.7",
39133913
"mainTemplate": {
39143914
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
39153915
"contentVersion": "[variables('playbookVersion3')]",
@@ -4286,7 +4286,7 @@
42864286
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
42874287
],
42884288
"properties": {
4289-
"description": "ProofpointTAP-CheckAccountInVAP Playbook with template version 3.0.6",
4289+
"description": "ProofpointTAP-CheckAccountInVAP Playbook with template version 3.0.7",
42904290
"mainTemplate": {
42914291
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
42924292
"contentVersion": "[variables('playbookVersion4')]",
@@ -4705,7 +4705,7 @@
47054705
"apiVersion": "2023-04-01-preview",
47064706
"location": "[parameters('workspace-location')]",
47074707
"properties": {
4708-
"version": "3.0.6",
4708+
"version": "3.0.7",
47094709
"kind": "Solution",
47104710
"contentSchemaVersion": "3.0.0",
47114711
"displayName": "ProofPointTap",

‎Solutions/ProofPointTap/ReleaseNotes.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
11
| **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** |
22
|-------------|--------------------------------|--------------------------------------------------------------|
3+
| 3.0.7 | 21-04-2025 | Correction in **CCP Connector DCR File** to resolve deployment issue |
34
| 3.0.6 | 04-04-2025 | New **CCP Connector** added Proofpoint TAP (via Codeless Connector Platform) |
45
| 3.0.5 | 12-01-2025 | Updated **Analytic Rule** MalwareLinkClicked.yaml |
56
| 3.0.4 | 26-04-2024 | Repackaged for fix on parser in maintemplate to have old parsername and parentid |

0 commit comments

Comments
 (0)