Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.
Netskope
- Details
- Content
- Dependencies
- Version History
Cloud access security broker that enables to find, understand, and secure cloud apps.
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Mapper | |
Netskope Outgoing Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Access Method | |
Netskope Quarantine Policy | |
Netskope Violations | |
Netskope Original Severity | |
Netskope Breach Score | |
Netskope Breach Description | |
Netskope Breach Source | |
Netskope Acknowledge | |
Netskope Action | |
Netskope Object | |
Netskope Leak ID | |
Netskope DLP Policy | |
Netskope Breach Date | |
Netskope DLP Rule | |
Netskope Object Type | |
Netskope Quarantine Profile | |
Netskope Original Status | |
Netskope Severity | |
Netskope File Type | |
Netskope Behavior Analytics Policy | |
Netskope Quarantine File ID | |
Netskope Malware ID | |
Netskope DLP Profile | |
Netskope Site | |
Netskope Cloud Confidence Level | |
Netskope Object ID | |
Netskope Timestamp | |
Netskope Malware Name | |
Netskope Malware Type | |
Netskope Quarantine Profile ID |
Incident Types
| Name | Description |
|---|---|
Netskope Malicious Sites | |
Netskope Quarantine | |
Netskope Compromised Credentials | |
Netskope Behavior Analytics | |
Netskope DLP | |
Netskope Alert | |
Netskope Event | |
Netskope Malware | |
Netskope DLP Incident | |
Netskope Legal Hold |
Integrations
| Name | Description |
|---|---|
| Netskope (API v2) | |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
Layouts
| Name | Description |
|---|---|
Netskope - User Analytics Layout | |
Netskope - Quarantine Layout | |
Netskope - DLP Layout | |
Netskope - Compromised Credentials Layout | |
Netskope - Malware Layout | |
Netskope - DLP Incident Layout |
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Mapper | |
Netskope Outgoing Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Breach Score | |
Netskope Malware Name | |
Netskope Object Type | |
Netskope Quarantine Profile | |
Netskope Site | |
Netskope Action | |
Netskope File Type | |
Netskope Behavior Analytics Policy | |
Netskope Breach Source | |
Netskope DLP Policy | |
Netskope DLP Rule | |
Netskope Severity | |
Netskope Object | |
Netskope Access Method | |
Netskope Original Severity | |
Netskope Leak ID | |
Netskope Original Status | |
Netskope Quarantine Policy | |
Netskope Malware Type | |
Netskope Breach Description | |
Netskope Quarantine File ID | |
Netskope Quarantine Profile ID | |
Netskope DLP Profile | |
Netskope Object ID | |
Netskope Cloud Confidence Level | |
Netskope Breach Date | |
Netskope Violations | |
Netskope Malware ID | |
Netskope Timestamp | |
Netskope Acknowledge |
Incident Types
| Name | Description |
|---|---|
Netskope Compromised Credentials | |
Netskope Behavior Analytics | |
Netskope Legal Hold | |
Netskope DLP | |
Netskope Malware | |
Netskope Quarantine | |
Netskope Malicious Sites | |
Netskope Alert | |
Netskope Event | |
Netskope DLP Incident |
Integrations
| Name | Description |
|---|---|
| Netskope Event Collector v2 | Netskope Event Collector v2 integration. |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
| Netskope Event Collector (Deprecated) | Deprecated. Use Netskope Event Collector v2 instead. |
Modeling Rules
| Name | Description |
|---|---|
Netskope Modeling Rule |
Required Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
Optional Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Common Types | By: Cortex XSOAR |
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Filters And Transformers | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
4.2.6 - 10935523 (July 12, 2026)
4.3.4 - 12871795 (September 8, 2026)
4.3.2 - 12411004 (August 27, 2026)
- 45670
Download
Integrations
Netskope (API v1)
- Updated the Fetch Incidents configuration parameters.
Modeling Rules
Netskope Modeling Rule
Fixed an issue where xdm.observer.action was not populated for network events, and for alert events of type network and malsite, because it was mapped to the activity field which is not present in those events.
- 45670
Download
4.3.0 - 12313702 (August 25, 2026)
4.2.6 - 10935523 (July 12, 2026)
4.1.1 - R5469292 (October 20, 2025)
- 41185
Download
Integrations
Netskope Event Collector v2
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.
Netskope Event Collector
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/python3:3.12.11.4508456.
- 41185
Download
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | April 14, 2020 | |
| Last Release | September 27, 2026 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
