Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.
Netskope
- Details
- Content
- Dependencies
- Version History
Cloud access security broker that enables to find, understand, and secure cloud apps.
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Mapper | |
Netskope Outgoing Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Object | |
Netskope Behavior Analytics Policy | |
Netskope Cloud Confidence Level | |
Netskope Malware ID | |
Netskope DLP Profile | |
Netskope Access Method | |
Netskope Malware Type | |
Netskope Timestamp | |
Netskope Violations | |
Netskope Quarantine Policy | |
Netskope Original Severity | |
Netskope Breach Source | |
Netskope Breach Score | |
Netskope Severity | |
Netskope Quarantine File ID | |
Netskope File Type | |
Netskope Breach Description | |
Netskope Malware Name | |
Netskope DLP Policy | |
Netskope Quarantine Profile | |
Netskope Quarantine Profile ID | |
Netskope Leak ID | |
Netskope Action | |
Netskope Original Status | |
Netskope Object Type | |
Netskope DLP Rule | |
Netskope Acknowledge | |
Netskope Breach Date | |
Netskope Object ID | |
Netskope Site |
Incident Types
| Name | Description |
|---|---|
Netskope Event | |
Netskope Behavior Analytics | |
Netskope DLP Incident | |
Netskope Malicious Sites | |
Netskope Compromised Credentials | |
Netskope DLP | |
Netskope Legal Hold | |
Netskope Malware | |
Netskope Alert | |
Netskope Quarantine |
Integrations
| Name | Description |
|---|---|
| Netskope (API v2) | |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
Layouts
| Name | Description |
|---|---|
Netskope - User Analytics Layout | |
Netskope - Compromised Credentials Layout | |
Netskope - Malware Layout | |
Netskope - Quarantine Layout | |
Netskope - DLP Incident Layout | |
Netskope - DLP Layout |
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Mapper | |
Netskope Outgoing Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Object ID | |
Netskope Access Method | |
Netskope Breach Description | |
Netskope Object Type | |
Netskope Quarantine Profile ID | |
Netskope Object | |
Netskope DLP Policy | |
Netskope Acknowledge | |
Netskope Severity | |
Netskope File Type | |
Netskope Quarantine Profile | |
Netskope Action | |
Netskope Cloud Confidence Level | |
Netskope Behavior Analytics Policy | |
Netskope DLP Profile | |
Netskope Original Severity | |
Netskope Malware ID | |
Netskope Quarantine Policy | |
Netskope Original Status | |
Netskope Breach Source | |
Netskope Breach Score | |
Netskope Violations | |
Netskope Leak ID | |
Netskope Site | |
Netskope Malware Type | |
Netskope Malware Name | |
Netskope Timestamp | |
Netskope Quarantine File ID | |
Netskope Breach Date | |
Netskope DLP Rule |
Incident Types
| Name | Description |
|---|---|
Netskope Event | |
Netskope Behavior Analytics | |
Netskope Compromised Credentials | |
Netskope Legal Hold | |
Netskope DLP Incident | |
Netskope DLP | |
Netskope Quarantine | |
Netskope Malicious Sites | |
Netskope Malware | |
Netskope Alert |
Integrations
| Name | Description |
|---|---|
| Netskope Event Collector v2 | Netskope Event Collector v2 integration. |
| Netskope Event Collector (Deprecated) | Deprecated. Use Netskope Event Collector v2 instead. |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
Modeling Rules
| Name | Description |
|---|---|
Netskope Modeling Rule |
Required Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
Optional Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Common Types | By: Cortex XSOAR |
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
4.2.6 - 10935523 (July 12, 2026)
4.3.4 - 12871795 (September 8, 2026)
4.3.2 - 12411004 (August 27, 2026)
- 45670
Download
Integrations
Netskope (API v1)
- Updated the Fetch Incidents configuration parameters.
Modeling Rules
Netskope Modeling Rule
Fixed an issue where xdm.observer.action was not populated for network events, and for alert events of type network and malsite, because it was mapped to the activity field which is not present in those events.
- 45670
Download
4.3.0 - 12313702 (August 25, 2026)
4.2.6 - 10935523 (July 12, 2026)
4.1.1 - R5469292 (October 20, 2025)
- 41185
Download
Integrations
Netskope Event Collector v2
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.
Netskope Event Collector
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/python3:3.12.11.4508456.
- 41185
Download
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | April 14, 2020 | |
| Last Release | September 8, 2026 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
