↳ GitHub sourceConnector

Proofpoint On Demand Email Security (via Codeless Connector Platform)

Description

Proofpoint On Demand Email Security data connector provides the capability to get Proofpoint on Demand Email Protection data, allows users to check message traceability, monitoring into email activity, threats,and data exfiltration by attackers and malicious insiders. The connector provides ability to review events in your org on an accelerated basis, get event log files in hourly increments for recent activity.

Declared status: 1
Declared author / publisher: Proofpoint

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Data types

ProofpointPODMailLog_CL ProofpointPODMessage_CL

Declared permissions

read and write permissions on the workspace are required.

Workspace

Workspace

Websocket API Credentials/permissions

**ProofpointClusterID**, and **ProofpointToken** are required. [See the documentation to learn more about API](https://proofpointcommunities.force.com/community/s/article/Proofpoint-on-Demand-Pod-Log-API).

Connector instructions

Content published in the repository. Refer to the original file for all parameters.

Cluster Id

API Key

toggle

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

File: Solutions/Proofpoint On demand(POD) Email Security/Data Connectors/ProofPointEmailSecurity_CCP/ProofpointPOD_Definaton.json ↗
Commit: 9800e51 ↗
Source identifier: ProofpointCCPDefinition

Additional source files 2

Solutions/Proofpoint On demand(POD) Email Security/Data Connectors/ProofPointEmailSecurity_CCP/ProofpointPOD_Definaton.jsonsource ↗Solutions/Proofpoint On demand(POD) Email Security/Data/Solution_ProofPointPOD.jsonsolution-membership ↗

GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.