Netskope

Details
Content
Dependencies
Version History

Cloud access security broker that enables to find, understand, and secure cloud apps.

Classifiers

Name	Description
Netskope Classifier
Netskope Mapper
Netskope Outgoing Mapper

Incident Fields

Name	Description
Netskope Action
Netskope Acknowledge
Netskope Access Method
Netskope Quarantine File ID
Netskope Site
Netskope Behavior Analytics Policy
Netskope File Type
Netskope Severity
Netskope Breach Score
Netskope Breach Description
Netskope Quarantine Profile
Netskope Original Status
Netskope Malware Name
Netskope Malware ID
Netskope Violations
Netskope Breach Source
Netskope Quarantine Profile ID
Netskope Object ID
Netskope DLP Rule
Netskope Object Type
Netskope Breach Date
Netskope Object
Netskope Leak ID
Netskope Timestamp
Netskope Original Severity
Netskope DLP Policy
Netskope Quarantine Policy
Netskope Cloud Confidence Level
Netskope Malware Type
Netskope DLP Profile

Incident Types

Name	Description
Netskope Behavior Analytics
Netskope DLP
Netskope Legal Hold
Netskope Quarantine
Netskope Compromised Credentials
Netskope Malware
Netskope DLP Incident
Netskope Malicious Sites
Netskope Alert
Netskope Event

Integrations

Name	Description
Netskope (Deprecated)	Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead.
Netskope (API v2)	Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.
Netskope (API v1)	Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.

Layouts

Name	Description
Netskope - Malware Layout
Netskope - DLP Incident Layout
Netskope - DLP Layout
Netskope - Quarantine Layout
Netskope - Compromised Credentials Layout
Netskope - User Analytics Layout

Classifiers

Name	Description
Netskope Classifier
Netskope Outgoing Mapper
Netskope Mapper

Incident Fields

Name	Description
Netskope Quarantine Policy
Netskope Malware Type
Netskope Malware Name
Netskope Malware ID
Netskope DLP Profile
Netskope Original Status
Netskope Acknowledge
Netskope Quarantine File ID
Netskope Access Method
Netskope Object ID
Netskope Object
Netskope Severity
Netskope Object Type
Netskope Action
Netskope Cloud Confidence Level
Netskope DLP Policy
Netskope Timestamp
Netskope Site
Netskope Quarantine Profile ID
Netskope DLP Rule
Netskope Breach Source
Netskope Breach Date
Netskope File Type
Netskope Behavior Analytics Policy
Netskope Quarantine Profile
Netskope Violations
Netskope Original Severity
Netskope Leak ID
Netskope Breach Description
Netskope Breach Score

Incident Types

Name	Description
Netskope DLP
Netskope DLP Incident
Netskope Event
Netskope Compromised Credentials
Netskope Quarantine
Netskope Alert
Netskope Malware
Netskope Behavior Analytics
Netskope Legal Hold
Netskope Malicious Sites

Integrations

Name	Description
Netskope Event Collector	Netskope Event Collector integration.
Netskope (Deprecated)	Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead.
Netskope Event Collector v2	Netskope Event Collector v2 integration.
Netskope (API v1)	Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
Netskope (API v2)	Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.

Modeling Rules

Name	Description
Netskope Modeling Rule

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (1)

Pack Name	Pack By
Common Types	By: Cortex XSOAR

All level dependencies (3)

Pack Name	Pack By
Aggregated Scripts	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR
Base	By: Cortex XSOAR

4.1.4 - 6088397 (December 1, 2025)

Integrations

Netskope (API v2)

Fixed an issue where large number values, such as incident IDs, were corrupted due to precision loss.

Related pull requests:
- 42003

Download

4.1.3 - 5818832 (November 11, 2025)

Integrations

Netskope (API v2)

Documentation and Metadata improvements.
Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41855

Download

4.1.2 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

4.1.1 - R5469292 (October 20, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41185

Download

4.1.0 - 4519710 (August 13, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 40717

Download

4.0.10 - 4096037 (July 8, 2025)

Integrations

Netskope (API v1)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Netskope (API v2)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 40498

Download

4.0.9 - R3980324 (June 26, 2025)

Integrations

Netskope (API v1)

Metadata and documentation improvements.

Netskope (API v2)

Metadata and documentation improvements.

Related pull requests:
- 39227

Download

4.0.8 - R2989425 (March 26, 2025)

Integrations

Netskope (API v2)

Fixed an issue with last run time of dlp incidents.
Updated the Docker image to: demisto/python3:3.12.8.1983910.

Related pull requests:
- 38867
- 39118

Download

4.0.7 - 2763721 (March 12, 2025)

Netskope

Ensure that mirroring fields only appear in XSOAR integrations.

Related pull requests:
- 38998

Download

4.0.6 - 2306914 (February 9, 2025)

Integrations

Netskope (API v2)

Documentation and metadata improvements.

Related pull requests:
- 38531

Download

4.0.5 - R2040490 (January 22, 2025)

Integrations

Netskope (API v2)

Fixed an issue where the fetch-incidents command failed when the event type parameter was not set.

Related pull requests:
- 38089

Download

4.0.4 - 1935630 (January 6, 2025)

Integrations

Netskope (API v2)

Fixed an issue where the fetch-incidents command created incidents with incorrect IDs.

Related pull requests:
- 37828

Download

4.0.3 - 1859794 (December 23, 2024)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 37493

Download

4.0.2 - 1820015 (December 16, 2024)

Integrations

Netskope (API v2)

Fixed an issue where manual pagination wasn't translated correctly from the given inputs.
Updated the Docker image to: demisto/python3:3.11.10.116949.

Related pull requests:
- 37712
- 37689

Download

4.0.1 - R1741355 (December 3, 2024)

Integrations

Netskope (API v1)

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37407
- 37402
- 37403
- 37405
- 37406
- 37404

Download

4.1.4 - 6088397 (December 1, 2025)

Integrations

Netskope (API v2)

Fixed an issue where large number values, such as incident IDs, were corrupted due to precision loss.

Related pull requests:
- 42003

Download

4.1.3 - 5818832 (November 11, 2025)

Integrations

Netskope (API v2)

Documentation and Metadata improvements.
Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41855

Download

4.1.2 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

4.1.1 - R5469292 (October 20, 2025)

Integrations

Netskope Event Collector v2

Lower the default limit for the get-events command to prevent overloading the playground.
Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.

Netskope Event Collector

Lower the default limit for the get-events command to prevent overloading the playground.
Updated the Docker image to: demisto/python3:3.12.11.4508456.

Related pull requests:
- 41185

Download

4.1.0 - 4524270 (August 14, 2025)

Integrations

New: Netskope Event Collector v2

Netskope Event Collector integration has been reworked to improve its ability to handle large amounts of data. This is achieved via a new endpoint and an asynchronous mechanism.

Related pull requests:
- 40717

Download

4.0.10 - 4096037 (July 8, 2025)

Integrations

Netskope (API v1)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Netskope Event Collector

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Netskope (API v2)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 40498

Download

4.0.9 - R3980324 (June 26, 2025)

Integrations

Netskope Event Collector

Metadata and documentation improvements.

Netskope (API v1)

Metadata and documentation improvements.

Netskope (API v2)

Metadata and documentation improvements.

Related pull requests:
- 39227

Download

4.0.8 - R2989425 (March 26, 2025)

Integrations

Netskope (API v2)

Fixed an issue with last run time of dlp incidents.
Updated the Docker image to: demisto/python3:3.12.8.1983910.

Related pull requests:
- 38867
- 39118

Download

4.0.7 - 2763721 (March 12, 2025)

Netskope

Ensure that mirroring fields only appear in XSOAR integrations.

Related pull requests:
- 38998

Download

4.0.6 - 2306914 (February 9, 2025)

Integrations

Netskope (API v2)

Documentation and metadata improvements.

Related pull requests:
- 38531

Download

4.0.5 - R2040490 (January 22, 2025)

Integrations

Netskope (API v2)

Fixed an issue where the fetch-incidents command failed when the event type parameter was not set.

Related pull requests:
- 38089

Download

4.0.4 - 1935630 (January 6, 2025)

Integrations

Netskope (API v2)

Fixed an issue where the fetch-incidents command created incidents with incorrect IDs.

Related pull requests:
- 37828

Download

4.0.3 - 1859794 (December 23, 2024)

Integrations

Netskope Event Collector

Fixed an issue where in rare cases not all events were pulled.

Related pull requests:
- 37493

Download

4.0.2 - 1820015 (December 16, 2024)

Integrations

Netskope (API v2)

Fixed an issue where manual pagination wasn't translated correctly from the given inputs.
Updated the Docker image to: demisto/python3:3.11.10.116949.

Related pull requests:
- 37712
- 37689

Download

4.0.1 - R1741355 (December 3, 2024)

Integrations

Netskope Event Collector

Updated the Docker image to: demisto/python3:3.11.10.115186.

Netskope (API v1)

Updated the Docker image to: demisto/python3:3.11.10.115186.

Related pull requests:
- 37407
- 37402
- 37403
- 37405
- 37406
- 37404

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	April 14, 2020
Last Release	December 1, 2025

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.