Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
Netskope
- Details
- Content
- Dependencies
- Version History
Cloud access security broker that enables to find, understand, and secure cloud apps.
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Outgoing Mapper | |
Netskope Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Action | |
Netskope Behavior Analytics Policy | |
Netskope Violations | |
Netskope Timestamp | |
Netskope Malware ID | |
Netskope Breach Source | |
Netskope Breach Description | |
Netskope Quarantine File ID | |
Netskope DLP Policy | |
Netskope Object Type | |
Netskope DLP Rule | |
Netskope DLP Profile | |
Netskope Malware Name | |
Netskope Access Method | |
Netskope Site | |
Netskope Object | |
Netskope Original Status | |
Netskope Malware Type | |
Netskope Cloud Confidence Level | |
Netskope Leak ID | |
Netskope Quarantine Profile ID | |
Netskope Object ID | |
Netskope Severity | |
Netskope Quarantine Profile | |
Netskope Acknowledge | |
Netskope File Type | |
Netskope Breach Score | |
Netskope Original Severity | |
Netskope Breach Date | |
Netskope Quarantine Policy |
Incident Types
| Name | Description |
|---|---|
Netskope DLP | |
Netskope Quarantine | |
Netskope Legal Hold | |
Netskope Malware | |
Netskope DLP Incident | |
Netskope Event | |
Netskope Malicious Sites | |
Netskope Alert | |
Netskope Behavior Analytics | |
Netskope Compromised Credentials |
Integrations
| Name | Description |
|---|---|
| Netskope (API v1) | |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
Layouts
| Name | Description |
|---|---|
Netskope - User Analytics Layout | |
Netskope - Quarantine Layout | |
Netskope - DLP Incident Layout | |
Netskope - Compromised Credentials Layout | |
Netskope - Malware Layout | |
Netskope - DLP Layout |
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Outgoing Mapper | |
Netskope Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Quarantine Policy | |
Netskope Behavior Analytics Policy | |
Netskope Original Severity | |
Netskope DLP Rule | |
Netskope Breach Description | |
Netskope Severity | |
Netskope Object ID | |
Netskope Malware Type | |
Netskope Original Status | |
Netskope Quarantine Profile ID | |
Netskope Object Type | |
Netskope Access Method | |
Netskope Breach Date | |
Netskope DLP Policy | |
Netskope Violations | |
Netskope Timestamp | |
Netskope Malware ID | |
Netskope Cloud Confidence Level | |
Netskope Site | |
Netskope Quarantine File ID | |
Netskope Breach Score | |
Netskope DLP Profile | |
Netskope Object | |
Netskope Acknowledge | |
Netskope Malware Name | |
Netskope Leak ID | |
Netskope Breach Source | |
Netskope Quarantine Profile | |
Netskope File Type | |
Netskope Action |
Incident Types
| Name | Description |
|---|---|
Netskope Legal Hold | |
Netskope Quarantine | |
Netskope Event | |
Netskope Malware | |
Netskope DLP Incident | |
Netskope Behavior Analytics | |
Netskope Compromised Credentials | |
Netskope Alert | |
Netskope DLP | |
Netskope Malicious Sites |
Integrations
| Name | Description |
|---|---|
| Netskope Event Collector | Netskope Event Collector integration. |
| Netskope Event Collector v2 | Netskope Event Collector v2 integration. |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
Modeling Rules
| Name | Description |
|---|---|
Netskope Modeling Rule |
Required Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
Optional Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Common Types | By: Cortex XSOAR |
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
4.1.1 - R5469292 (October 20, 2025)
- 41185
Download
Integrations
Netskope Event Collector v2
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.
Netskope Event Collector
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/python3:3.12.11.4508456.
- 41185
Download
4.0.10 - 4096037 (July 8, 2025)
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | April 14, 2020 | |
| Last Release | October 29, 2025 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
