Netskope

Details
Content
Dependencies
Version History

Cloud access security broker that enables to find, understand, and secure cloud apps.

Classifiers

Name	Description
Netskope Classifier
Netskope Outgoing Mapper
Netskope Mapper

Incident Fields

Name	Description
Netskope Cloud Confidence Level
Netskope File Type
Netskope Breach Source
Netskope Violations
Netskope Quarantine Policy
Netskope Object Type
Netskope Quarantine File ID
Netskope Quarantine Profile ID
Netskope DLP Profile
Netskope DLP Rule
Netskope DLP Policy
Netskope Quarantine Profile
Netskope Severity
Netskope Malware ID
Netskope Breach Score
Netskope Breach Date
Netskope Behavior Analytics Policy
Netskope Malware Name
Netskope Leak ID
Netskope Object ID
Netskope Malware Type
Netskope Timestamp
Netskope Object
Netskope Access Method
Netskope Breach Description
Netskope Original Severity
Netskope Original Status
Netskope Action
Netskope Acknowledge
Netskope Site

Incident Types

Name	Description
Netskope Malware
Netskope Compromised Credentials
Netskope Event
Netskope Behavior Analytics
Netskope Quarantine
Netskope DLP Incident
Netskope Malicious Sites
Netskope Legal Hold
Netskope DLP
Netskope Alert

Integrations

Name	Description
Netskope (API v1)	Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
Netskope (API v2)	Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.
Netskope (Deprecated)	Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead.

Layouts

Name	Description
Netskope - Compromised Credentials Layout
Netskope - Quarantine Layout
Netskope - Malware Layout
Netskope - DLP Incident Layout
Netskope - User Analytics Layout
Netskope - DLP Layout

Classifiers

Name	Description
Netskope Classifier
Netskope Mapper
Netskope Outgoing Mapper

Incident Fields

Name	Description
Netskope Quarantine Profile
Netskope Acknowledge
Netskope Leak ID
Netskope Cloud Confidence Level
Netskope Quarantine Profile ID
Netskope Object
Netskope Site
Netskope Timestamp
Netskope Quarantine Policy
Netskope Access Method
Netskope Malware Type
Netskope Breach Source
Netskope Original Status
Netskope File Type
Netskope Object Type
Netskope DLP Policy
Netskope Quarantine File ID
Netskope Breach Date
Netskope Violations
Netskope Behavior Analytics Policy
Netskope DLP Rule
Netskope Breach Description
Netskope Malware ID
Netskope Action
Netskope Original Severity
Netskope DLP Profile
Netskope Severity
Netskope Object ID
Netskope Breach Score
Netskope Malware Name

Incident Types

Name	Description
Netskope Behavior Analytics
Netskope Malware
Netskope Alert
Netskope Compromised Credentials
Netskope Quarantine
Netskope DLP Incident
Netskope Event
Netskope Malicious Sites
Netskope DLP
Netskope Legal Hold

Integrations

Name	Description
Netskope Event Collector v2	Netskope Event Collector v2 integration.
Netskope (API v1)	Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
Netskope (Deprecated)	Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead.
Netskope Event Collector (Deprecated)	Deprecated. Use Netskope Event Collector v2 instead.
Netskope (API v2)	Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.

Modeling Rules

Name	Description
Netskope Modeling Rule

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (1)

Pack Name	Pack By
Common Types	By: Cortex XSOAR

All level dependencies (2)

Pack Name	Pack By
Filters And Transformers	By: Cortex XSOAR
Base	By: Cortex XSOAR

4.2.5 - 10383329 (June 22, 2026)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 44703

Download

4.2.4 - 9264184 (May 25, 2026)

Integrations

Netskope (API v2)

Documentation and metadata improvements.

Related pull requests:
- 44363
- 44358
- 42667
- 43952
- 43732
- 44181
- 44008
- 44052
- 44349
- 44357
- 44339
- 44344
- 43700

Download

4.2.3 - 8515806 (April 27, 2026)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 43940

Download

4.2.2 - 8210013 (April 13, 2026)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 43748

Download

4.2.1 - 7843807 (March 22, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43568

Download

4.2.0 - 6456962 (December 28, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 42425

Download

4.1.4 - 6088397 (December 1, 2025)

Integrations

Netskope (API v2)

Fixed an issue where large number values, such as incident IDs, were corrupted due to precision loss.

Related pull requests:
- 42003

Download

4.1.3 - 5818832 (November 11, 2025)

Integrations

Netskope (API v2)

Documentation and Metadata improvements.
Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41855

Download

4.1.2 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

4.1.1 - R5469292 (October 20, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41185

Download

4.1.0 - 4519710 (August 13, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 40717

Download

4.0.10 - 4096037 (July 8, 2025)

Integrations

Netskope (API v1)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Netskope (API v2)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 40498

Download

4.0.9 - R3980324 (June 26, 2025)

Integrations

Netskope (API v1)

Metadata and documentation improvements.

Netskope (API v2)

Metadata and documentation improvements.

Related pull requests:
- 39227

Download

4.2.5 - 10383329 (June 22, 2026)

Integrations

Netskope Event Collector v2

Improved implementation to reduce memory usage and prevent out-of-memory failures on high-volume tenants.
Updated the Docker image to: demisto/auth-utils:1.0.0.10133006.

Related pull requests:
- 44703

Download

4.2.4 - 9264184 (May 25, 2026)

Integrations

Netskope (API v2)

Documentation and metadata improvements.

Related pull requests:
- 44363
- 44358
- 42667
- 43952
- 43732
- 44181
- 44008
- 44052
- 44349
- 44357
- 44339
- 44344
- 43700

Download

4.2.3 - 8542515 (April 28, 2026)

Modeling Rules

Netskope Modeling Rule

Documentation and metadata improvements.

Related pull requests:
- 43940

Download

4.2.2 - 8210013 (April 13, 2026)

Integrations

Netskope Event Collector v2

Documentation and metadata improvements.

Netskope Event Collector (Deprecated)

Documentation and metadata improvements.

Related pull requests:
- 43748

Download

4.2.1 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43568

Download

4.2.0 - 6456962 (December 28, 2025)

Integrations

Netskope Event Collector (Deprecated)

Deprecated. Use Netskope Event Collector v2 instead.

Related pull requests:
- 42425

Download

4.1.4 - 6088397 (December 1, 2025)

Integrations

Netskope (API v2)

Fixed an issue where large number values, such as incident IDs, were corrupted due to precision loss.

Related pull requests:
- 42003

Download

4.1.3 - 5818832 (November 11, 2025)

Integrations

Netskope (API v2)

Documentation and Metadata improvements.
Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41855

Download

4.1.2 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

4.1.1 - R5469292 (October 20, 2025)

Integrations

Netskope Event Collector v2

Lower the default limit for the get-events command to prevent overloading the playground.
Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.

Netskope Event Collector

Lower the default limit for the get-events command to prevent overloading the playground.
Updated the Docker image to: demisto/python3:3.12.11.4508456.

Related pull requests:
- 41185

Download

4.1.0 - 4524270 (August 14, 2025)

Integrations

New: Netskope Event Collector v2

Netskope Event Collector integration has been reworked to improve its ability to handle large amounts of data. This is achieved via a new endpoint and an asynchronous mechanism.

Related pull requests:
- 40717

Download

4.0.10 - 4096037 (July 8, 2025)

Integrations

Netskope (API v1)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Netskope Event Collector

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Netskope (API v2)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 40498

Download

4.0.9 - R3980324 (June 26, 2025)

Integrations

Netskope Event Collector

Metadata and documentation improvements.

Netskope (API v1)

Metadata and documentation improvements.

Netskope (API v2)

Metadata and documentation improvements.

Related pull requests:
- 39227

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	April 14, 2020
Last Release	June 22, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.