Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead.
Netskope
- Details
- Content
- Dependencies
- Version History
Cloud access security broker that enables to find, understand, and secure cloud apps.
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Outgoing Mapper | |
Netskope Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Timestamp | |
Netskope Malware Type | |
Netskope Breach Source | |
Netskope Original Status | |
Netskope Acknowledge | |
Netskope DLP Profile | |
Netskope Malware Name | |
Netskope Site | |
Netskope Breach Description | |
Netskope Original Severity | |
Netskope Quarantine Profile | |
Netskope Cloud Confidence Level | |
Netskope Action | |
Netskope Object | |
Netskope File Type | |
Netskope Quarantine File ID | |
Netskope Breach Date | |
Netskope DLP Policy | |
Netskope Access Method | |
Netskope Breach Score | |
Netskope Leak ID | |
Netskope Object ID | |
Netskope DLP Rule | |
Netskope Behavior Analytics Policy | |
Netskope Quarantine Profile ID | |
Netskope Malware ID | |
Netskope Object Type | |
Netskope Severity | |
Netskope Violations | |
Netskope Quarantine Policy |
Incident Types
| Name | Description |
|---|---|
Netskope Quarantine | |
Netskope Legal Hold | |
Netskope Malicious Sites | |
Netskope Malware | |
Netskope Event | |
Netskope Compromised Credentials | |
Netskope DLP Incident | |
Netskope Alert | |
Netskope DLP | |
Netskope Behavior Analytics |
Integrations
| Name | Description |
|---|---|
| Netskope (Deprecated) | |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
Layouts
| Name | Description |
|---|---|
Netskope - Malware Layout | |
Netskope - Compromised Credentials Layout | |
Netskope - DLP Layout | |
Netskope - User Analytics Layout | |
Netskope - Quarantine Layout | |
Netskope - DLP Incident Layout |
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Outgoing Mapper | |
Netskope Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Action | |
Netskope Cloud Confidence Level | |
Netskope DLP Policy | |
Netskope Site | |
Netskope Severity | |
Netskope Breach Source | |
Netskope Acknowledge | |
Netskope Breach Score | |
Netskope Breach Description | |
Netskope Quarantine Policy | |
Netskope Breach Date | |
Netskope Access Method | |
Netskope Behavior Analytics Policy | |
Netskope Quarantine File ID | |
Netskope File Type | |
Netskope Leak ID | |
Netskope Malware ID | |
Netskope Original Severity | |
Netskope Quarantine Profile ID | |
Netskope Object ID | |
Netskope Violations | |
Netskope Malware Name | |
Netskope Object Type | |
Netskope Original Status | |
Netskope Timestamp | |
Netskope DLP Rule | |
Netskope Object | |
Netskope Quarantine Profile | |
Netskope DLP Profile | |
Netskope Malware Type |
Incident Types
| Name | Description |
|---|---|
Netskope Compromised Credentials | |
Netskope Malicious Sites | |
Netskope DLP Incident | |
Netskope Legal Hold | |
Netskope Alert | |
Netskope Quarantine | |
Netskope DLP | |
Netskope Event | |
Netskope Malware | |
Netskope Behavior Analytics |
Integrations
| Name | Description |
|---|---|
| Netskope Event Collector | Netskope Event Collector integration. |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
| Netskope Event Collector v2 | Netskope Event Collector v2 integration. |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
Modeling Rules
| Name | Description |
|---|---|
Netskope Modeling Rule |
Required Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
Optional Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Common Types | By: Cortex XSOAR |
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
4.0.0 - 1448088 (September 29, 2024)
- 36537
- 36351
Download
Classifiers
Netskope Classifier
Updated the integration classifier to support mirroring.
Integrations
Netskope (API v2)
- Added the following command: netskope-incident-list.
- Updated the Docker image to: demisto/python3:3.11.10.111526.
Layouts
- New: Netskope - DLP Incident Layout
New layout for Netskope DLP incidents (Available from Cortex XSOAR 6.10).
Mappers
New: Netskope Outgoing Mapper
Added an outgoing mapper (Available from Cortex XSOAR 6.10).
Netskope Mapper
-Updated the Netskope mapper for the DLP incident type.
- 36537
- 36351
Download
3.3.13 - 1379612 (September 13, 2024)
4.1.1 - 4811097 (September 8, 2025)
- 41185
Download
Integrations
Netskope Event Collector v2
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.
Netskope Event Collector
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/python3:3.12.11.4508456.
- 41185
Download
4.0.10 - 4096037 (July 8, 2025)
4.0.0 - 1448088 (September 29, 2024)
- 36537
- 36351
Download
Classifiers
Netskope Classifier
Updated the integration classifier to support mirroring.
Integrations
Netskope (API v2)
- Added the following command: netskope-incident-list.
- Updated the Docker image to: demisto/python3:3.11.10.111526.
Mappers
New: Netskope Outgoing Mapper
Added an outgoing mapper (Available from Cortex XSOAR 6.10).
Netskope Mapper
-Updated the Netskope mapper for the DLP incident type.
- 36537
- 36351
Download
3.3.13 - 1379612 (September 13, 2024)
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | April 14, 2020 | |
| Last Release | September 8, 2025 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
