Fix CCP/CCF terminology, doc format mismatch, and column name in README

- Solution manifest description said "CCP-based" instead of "CCF-based"
- README architecture diagram said gzip-compressed JSON, actual format is CSV
- README validation query referenced IsAlert column which doesn't exist; the table column is Alert

Author: keshavm021

Solutions/NetskopeAlertEvents/Data/Solution_NetskopeAlertEvents.json

@@ -2,7 +2,7 @@
   "Name": "NetskopeAlertEvents",
   "Author": "Netskope",
   "Logo": "<img src=\"https://raw.githubusercontent.com/Azure/Azure-Sentinel/master/Logos/netskope.svg\" width=\"75px\" height=\"75px\">",
-  "Description": "The Netskope Alerts & Events solution enables streaming of alert and event logs from Netskope to Microsoft Sentinel via Azure Blob Storage and Event Grid. It provides visibility into DLP incidents, malware and threat detections, policy violations, anomalous behavior, and cloud application activity across the Netskope Security Cloud.\n\n**Included Content:**\n- 1 Data Connector (CCP-based Blob Storage connector)\n- 1 Workbook (Alerts & Events Dashboard)\n- 3 Analytics Rules",
+  "Description": "The Netskope Alerts & Events solution enables streaming of alert and event logs from Netskope to Microsoft Sentinel via Azure Blob Storage and Event Grid. It provides visibility into DLP incidents, malware and threat detections, policy violations, anomalous behavior, and cloud application activity across the Netskope Security Cloud.\n\n**Included Content:**\n- 1 Data Connector (CCF-based Blob Storage connector)\n- 1 Workbook (Alerts & Events Dashboard)\n- 3 Analytics Rules",
   "Workbooks": [
     "Workbooks/NetskopeAlertEventsDashboard/NetskopeAlertEvents_Workbook.json"
   ],

Solutions/NetskopeAlertEvents/README.md

@@ -35,7 +35,7 @@ The solution provides visibility into:
         Netskope Log Streaming
                  |
                  v
-        Azure Blob Storage            (gzip-compressed JSON)
+        Azure Blob Storage            (gzip-compressed CSV)
                  |
                  v
            Event Grid                 (Blob Created notifications)
@@ -122,7 +122,7 @@ then click **Connect**.
 4. Confirm alerts populate severity and DLP fields:
    ```kusto
    NetskopeAlertEvents_CL
-   | where IsAlert =~ "yes"
+   | where Alert =~ "yes"
    | summarize count() by Severity, AlertType
    ```
 5. Open the **Netskope Alerts & Events** workbook and confirm tiles render.