Netskope

Details
Content
Dependencies
Version History

Cloud access security broker that enables to find, understand, and secure cloud apps.

Classifiers

Name	Description
Netskope Classifier
Netskope Outgoing Mapper
Netskope Mapper

Incident Fields

Name	Description
Netskope Quarantine File ID
Netskope Leak ID
Netskope Breach Source
Netskope File Type
Netskope Original Severity
Netskope Behavior Analytics Policy
Netskope Object Type
Netskope Violations
Netskope Cloud Confidence Level
Netskope Severity
Netskope Original Status
Netskope Object
Netskope Breach Description
Netskope DLP Policy
Netskope Acknowledge
Netskope Quarantine Profile
Netskope Malware Type
Netskope Quarantine Policy
Netskope Breach Score
Netskope Breach Date
Netskope Object ID
Netskope Timestamp
Netskope Malware ID
Netskope DLP Profile
Netskope Site
Netskope Action
Netskope Access Method
Netskope DLP Rule
Netskope Malware Name
Netskope Quarantine Profile ID

Incident Types

Name	Description
Netskope Behavior Analytics
Netskope Compromised Credentials
Netskope Alert
Netskope Legal Hold
Netskope DLP
Netskope Malware
Netskope DLP Incident
Netskope Quarantine
Netskope Event
Netskope Malicious Sites

Integrations

Name	Description
Netskope (API v1)	Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
Netskope (Deprecated)	Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead.
Netskope (API v2)	Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.

Layouts

Name	Description
Netskope - Malware Layout
Netskope - DLP Layout
Netskope - Compromised Credentials Layout
Netskope - DLP Incident Layout
Netskope - User Analytics Layout
Netskope - Quarantine Layout

Classifiers

Name	Description
Netskope Classifier
Netskope Outgoing Mapper
Netskope Mapper

Incident Fields

Name	Description
Netskope Action
Netskope Malware Type
Netskope Original Status
Netskope Object Type
Netskope Leak ID
Netskope Breach Description
Netskope Malware Name
Netskope Breach Date
Netskope Quarantine Policy
Netskope Severity
Netskope Behavior Analytics Policy
Netskope Breach Score
Netskope Object
Netskope Object ID
Netskope DLP Rule
Netskope Timestamp
Netskope Site
Netskope File Type
Netskope Violations
Netskope Original Severity
Netskope Quarantine Profile ID
Netskope Cloud Confidence Level
Netskope Access Method
Netskope Malware ID
Netskope DLP Policy
Netskope Quarantine Profile
Netskope Acknowledge
Netskope DLP Profile
Netskope Breach Source
Netskope Quarantine File ID

Incident Types

Name	Description
Netskope Legal Hold
Netskope Malicious Sites
Netskope DLP
Netskope Behavior Analytics
Netskope Compromised Credentials
Netskope DLP Incident
Netskope Malware
Netskope Alert
Netskope Event
Netskope Quarantine

Integrations

Name	Description
Netskope Event Collector v2	Netskope Event Collector v2 integration.
Netskope (Deprecated)	Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead.
Netskope (API v2)	Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.
Netskope Event Collector (Deprecated)	Deprecated. Use Netskope Event Collector v2 instead.
Netskope (API v1)	Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.

Modeling Rules

Name	Description
Netskope Modeling Rule

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (1)

Pack Name	Pack By
Common Types	By: Cortex XSOAR

All level dependencies (2)

Pack Name	Pack By
Filters And Transformers	By: Cortex XSOAR
Base	By: Cortex XSOAR

4.2.6 - 10935523 (July 12, 2026)

Integrations

Netskope (API v2)

Fixed an issue in the Netskope (API v2) integration where the integration could fail if certain parameters were omitted.

Related pull requests:
- 44661
- 44175
- 44249
- 44307
- 44583
- 44603
- 44614
- 44616
- 44620
- 44624
- 44625
- 44628
- 44633
- 44627

Download

4.2.5 - 10383329 (June 22, 2026)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 44703

Download

4.2.4 - 9264184 (May 25, 2026)

Integrations

Netskope (API v2)

Documentation and metadata improvements.

Related pull requests:
- 44363
- 44358
- 42667
- 43952
- 43732
- 44181
- 44008
- 44052
- 44349
- 44357
- 44339
- 44344
- 43700

Download

4.2.3 - 8515806 (April 27, 2026)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 43940

Download

4.2.2 - 8210013 (April 13, 2026)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 43748

Download

4.2.1 - 7843807 (March 22, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43568

Download

4.2.0 - 6456962 (December 28, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 42425

Download

4.1.4 - 6088397 (December 1, 2025)

Integrations

Netskope (API v2)

Fixed an issue where large number values, such as incident IDs, were corrupted due to precision loss.

Related pull requests:
- 42003

Download

4.1.3 - 5818832 (November 11, 2025)

Integrations

Netskope (API v2)

Documentation and Metadata improvements.
Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41855

Download

4.1.2 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

4.1.1 - R5469292 (October 20, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41185

Download

4.1.0 - 4519710 (August 13, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 40717

Download

4.2.6 - 10935523 (July 12, 2026)

Integrations

Netskope (API v2)

Fixed an issue in the Netskope (API v2) integration where the integration could fail if certain parameters were omitted.

Related pull requests:
- 44661
- 44175
- 44249
- 44307
- 44583
- 44603
- 44614
- 44616
- 44620
- 44624
- 44625
- 44628
- 44633
- 44627

Download

4.2.5 - 10383329 (June 22, 2026)

Integrations

Netskope Event Collector v2

Improved implementation to reduce memory usage and prevent out-of-memory failures on high-volume tenants.
Updated the Docker image to: demisto/auth-utils:1.0.0.10133006.

Related pull requests:
- 44703

Download

4.2.4 - 9264184 (May 25, 2026)

Integrations

Netskope (API v2)

Documentation and metadata improvements.

Related pull requests:
- 44363
- 44358
- 42667
- 43952
- 43732
- 44181
- 44008
- 44052
- 44349
- 44357
- 44339
- 44344
- 43700

Download

4.2.3 - 8542515 (April 28, 2026)

Modeling Rules

Netskope Modeling Rule

Documentation and metadata improvements.

Related pull requests:
- 43940

Download

4.2.2 - 8210013 (April 13, 2026)

Integrations

Netskope Event Collector v2

Documentation and metadata improvements.

Netskope Event Collector (Deprecated)

Documentation and metadata improvements.

Related pull requests:
- 43748

Download

4.2.1 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43568

Download

4.2.0 - 6456962 (December 28, 2025)

Integrations

Netskope Event Collector (Deprecated)

Deprecated. Use Netskope Event Collector v2 instead.

Related pull requests:
- 42425

Download

4.1.4 - 6088397 (December 1, 2025)

Integrations

Netskope (API v2)

Fixed an issue where large number values, such as incident IDs, were corrupted due to precision loss.

Related pull requests:
- 42003

Download

4.1.3 - 5818832 (November 11, 2025)

Integrations

Netskope (API v2)

Documentation and Metadata improvements.
Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41855

Download

4.1.2 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

4.1.1 - R5469292 (October 20, 2025)

Integrations

Netskope Event Collector v2

Lower the default limit for the get-events command to prevent overloading the playground.
Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.

Netskope Event Collector

Lower the default limit for the get-events command to prevent overloading the playground.
Updated the Docker image to: demisto/python3:3.12.11.4508456.

Related pull requests:
- 41185

Download

4.1.0 - 4524270 (August 14, 2025)

Integrations

New: Netskope Event Collector v2

Netskope Event Collector integration has been reworked to improve its ability to handle large amounts of data. This is achieved via a new endpoint and an asynchronous mechanism.

Related pull requests:
- 40717

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	April 14, 2020
Last Release	July 12, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.