Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
Netskope
- Details
- Content
- Dependencies
- Version History
Cloud access security broker that enables to find, understand, and secure cloud apps.
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Mapper | |
Netskope Outgoing Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Original Severity | |
Netskope Original Status | |
Netskope DLP Profile | |
Netskope Quarantine File ID | |
Netskope Object ID | |
Netskope Quarantine Profile | |
Netskope Access Method | |
Netskope DLP Policy | |
Netskope Timestamp | |
Netskope DLP Rule | |
Netskope File Type | |
Netskope Malware ID | |
Netskope Severity | |
Netskope Site | |
Netskope Malware Type | |
Netskope Malware Name | |
Netskope Behavior Analytics Policy | |
Netskope Leak ID | |
Netskope Breach Source | |
Netskope Breach Score | |
Netskope Action | |
Netskope Object | |
Netskope Violations | |
Netskope Object Type | |
Netskope Quarantine Profile ID | |
Netskope Cloud Confidence Level | |
Netskope Acknowledge | |
Netskope Breach Description | |
Netskope Breach Date | |
Netskope Quarantine Policy |
Incident Types
| Name | Description |
|---|---|
Netskope Behavior Analytics | |
Netskope Compromised Credentials | |
Netskope Legal Hold | |
Netskope DLP Incident | |
Netskope Quarantine | |
Netskope DLP | |
Netskope Alert | |
Netskope Malware | |
Netskope Malicious Sites | |
Netskope Event |
Integrations
| Name | Description |
|---|---|
| Netskope (API v1) | |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
Layouts
| Name | Description |
|---|---|
Netskope - User Analytics Layout | |
Netskope - Malware Layout | |
Netskope - DLP Layout | |
Netskope - DLP Incident Layout | |
Netskope - Quarantine Layout | |
Netskope - Compromised Credentials Layout |
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Outgoing Mapper | |
Netskope Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Behavior Analytics Policy | |
Netskope Quarantine Policy | |
Netskope Leak ID | |
Netskope File Type | |
Netskope Site | |
Netskope Malware ID | |
Netskope Access Method | |
Netskope Breach Source | |
Netskope Malware Name | |
Netskope Object ID | |
Netskope Breach Date | |
Netskope DLP Policy | |
Netskope Original Status | |
Netskope Breach Description | |
Netskope Timestamp | |
Netskope Violations | |
Netskope Object | |
Netskope Original Severity | |
Netskope Malware Type | |
Netskope Quarantine File ID | |
Netskope Object Type | |
Netskope Quarantine Profile ID | |
Netskope Quarantine Profile | |
Netskope Acknowledge | |
Netskope Action | |
Netskope Breach Score | |
Netskope Severity | |
Netskope DLP Profile | |
Netskope Cloud Confidence Level | |
Netskope DLP Rule |
Incident Types
| Name | Description |
|---|---|
Netskope Behavior Analytics | |
Netskope Malicious Sites | |
Netskope Alert | |
Netskope DLP | |
Netskope DLP Incident | |
Netskope Event | |
Netskope Compromised Credentials | |
Netskope Quarantine | |
Netskope Legal Hold | |
Netskope Malware |
Integrations
| Name | Description |
|---|---|
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
| Netskope Event Collector v2 | Netskope Event Collector v2 integration. |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
| Netskope Event Collector (Deprecated) | Deprecated. Use Netskope Event Collector v2 instead. |
Modeling Rules
| Name | Description |
|---|---|
Netskope Modeling Rule |
Required Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
Optional Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Common Types | By: Cortex XSOAR |
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
4.2.6 - 10935523 (July 12, 2026)
4.3.4 - 12871795 (September 8, 2026)
4.3.2 - 12411004 (August 27, 2026)
- 45670
Download
Integrations
Netskope (API v1)
- Updated the Fetch Incidents configuration parameters.
Modeling Rules
Netskope Modeling Rule
Fixed an issue where xdm.observer.action was not populated for network events, and for alert events of type network and malsite, because it was mapped to the activity field which is not present in those events.
- 45670
Download
4.3.0 - 12313702 (August 25, 2026)
4.2.6 - 10935523 (July 12, 2026)
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | April 14, 2020 | |
| Last Release | October 21, 2026 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
