Netskope

Details
Content
Dependencies
Version History

Cloud access security broker that enables to find, understand, and secure cloud apps.

Classifiers

Name	Description
Netskope Classifier
Netskope Mapper
Netskope Outgoing Mapper

Incident Fields

Name	Description
Netskope Breach Date
Netskope Malware ID
Netskope DLP Rule
Netskope Malware Name
Netskope Breach Source
Netskope DLP Profile
Netskope Breach Score
Netskope Behavior Analytics Policy
Netskope Malware Type
Netskope Timestamp
Netskope File Type
Netskope Breach Description
Netskope Access Method
Netskope Severity
Netskope Site
Netskope Violations
Netskope Leak ID
Netskope Object Type
Netskope Cloud Confidence Level
Netskope Action
Netskope DLP Policy
Netskope Quarantine Profile ID
Netskope Quarantine Policy
Netskope Object
Netskope Quarantine Profile
Netskope Object ID
Netskope Acknowledge
Netskope Original Status
Netskope Original Severity
Netskope Quarantine File ID

Incident Types

Name	Description
Netskope DLP
Netskope Compromised Credentials
Netskope Legal Hold
Netskope Quarantine
Netskope Alert
Netskope Event
Netskope Behavior Analytics
Netskope Malware
Netskope Malicious Sites
Netskope DLP Incident

Integrations

Name	Description
Netskope (API v1)	Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
Netskope (API v2)	Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.
Netskope (Deprecated)	Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead.

Layouts

Name	Description
Netskope - Compromised Credentials Layout
Netskope - User Analytics Layout
Netskope - DLP Layout
Netskope - Malware Layout
Netskope - Quarantine Layout
Netskope - DLP Incident Layout

Classifiers

Name	Description
Netskope Classifier
Netskope Outgoing Mapper
Netskope Mapper

Incident Fields

Name	Description
Netskope DLP Policy
Netskope Original Severity
Netskope DLP Profile
Netskope Violations
Netskope Breach Source
Netskope Timestamp
Netskope Site
Netskope Acknowledge
Netskope Quarantine File ID
Netskope Original Status
Netskope Malware ID
Netskope Breach Score
Netskope Severity
Netskope Quarantine Policy
Netskope File Type
Netskope Malware Type
Netskope Behavior Analytics Policy
Netskope Malware Name
Netskope Action
Netskope Quarantine Profile
Netskope Breach Date
Netskope Leak ID
Netskope Breach Description
Netskope DLP Rule
Netskope Access Method
Netskope Object Type
Netskope Cloud Confidence Level
Netskope Object ID
Netskope Object
Netskope Quarantine Profile ID

Incident Types

Name	Description
Netskope Malware
Netskope Event
Netskope DLP
Netskope Alert
Netskope Behavior Analytics
Netskope DLP Incident
Netskope Legal Hold
Netskope Compromised Credentials
Netskope Quarantine
Netskope Malicious Sites

Integrations

Name	Description
Netskope Event Collector v2	Netskope Event Collector v2 integration.
Netskope (API v2)	Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.
Netskope (API v1)	Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
Netskope Event Collector (Deprecated)	Deprecated. Use Netskope Event Collector v2 instead.
Netskope (Deprecated)	Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead.

Modeling Rules

Name	Description
Netskope Modeling Rule

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (1)

Pack Name	Pack By
Common Types	By: Cortex XSOAR

All level dependencies (3)

Pack Name	Pack By
Base	By: Cortex XSOAR
Aggregated Scripts	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

4.2.0 - 6456962 (December 28, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 42425

Download

4.1.4 - 6088397 (December 1, 2025)

Integrations

Netskope (API v2)

Fixed an issue where large number values, such as incident IDs, were corrupted due to precision loss.

Related pull requests:
- 42003

Download

4.1.3 - 5818832 (November 11, 2025)

Integrations

Netskope (API v2)

Documentation and Metadata improvements.
Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41855

Download

4.1.2 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

4.1.1 - R5469292 (October 20, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41185

Download

4.1.0 - 4519710 (August 13, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 40717

Download

4.0.10 - 4096037 (July 8, 2025)

Integrations

Netskope (API v1)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Netskope (API v2)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 40498

Download

4.0.9 - R3980324 (June 26, 2025)

Integrations

Netskope (API v1)

Metadata and documentation improvements.

Netskope (API v2)

Metadata and documentation improvements.

Related pull requests:
- 39227

Download

4.0.8 - R2989425 (March 26, 2025)

Integrations

Netskope (API v2)

Fixed an issue with last run time of dlp incidents.
Updated the Docker image to: demisto/python3:3.12.8.1983910.

Related pull requests:
- 38867
- 39118

Download

4.0.7 - 2763721 (March 12, 2025)

Netskope

Ensure that mirroring fields only appear in XSOAR integrations.

Related pull requests:
- 38998

Download

4.0.6 - 2306914 (February 9, 2025)

Integrations

Netskope (API v2)

Documentation and metadata improvements.

Related pull requests:
- 38531

Download

4.0.5 - R2040490 (January 22, 2025)

Integrations

Netskope (API v2)

Fixed an issue where the fetch-incidents command failed when the event type parameter was not set.

Related pull requests:
- 38089

Download

4.2.0 - 6456962 (December 28, 2025)

Integrations

Netskope Event Collector (Deprecated)

Deprecated. Use Netskope Event Collector v2 instead.

Related pull requests:
- 42425

Download

4.1.4 - 6088397 (December 1, 2025)

Integrations

Netskope (API v2)

Fixed an issue where large number values, such as incident IDs, were corrupted due to precision loss.

Related pull requests:
- 42003

Download

4.1.3 - 5818832 (November 11, 2025)

Integrations

Netskope (API v2)

Documentation and Metadata improvements.
Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41855

Download

4.1.2 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

4.1.1 - R5469292 (October 20, 2025)

Integrations

Netskope Event Collector v2

Lower the default limit for the get-events command to prevent overloading the playground.
Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.

Netskope Event Collector

Lower the default limit for the get-events command to prevent overloading the playground.
Updated the Docker image to: demisto/python3:3.12.11.4508456.

Related pull requests:
- 41185

Download

4.1.0 - 4524270 (August 14, 2025)

Integrations

New: Netskope Event Collector v2

Netskope Event Collector integration has been reworked to improve its ability to handle large amounts of data. This is achieved via a new endpoint and an asynchronous mechanism.

Related pull requests:
- 40717

Download

4.0.10 - 4096037 (July 8, 2025)

Integrations

Netskope (API v1)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Netskope Event Collector

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Netskope (API v2)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 40498

Download

4.0.9 - R3980324 (June 26, 2025)

Integrations

Netskope Event Collector

Metadata and documentation improvements.

Netskope (API v1)

Metadata and documentation improvements.

Netskope (API v2)

Metadata and documentation improvements.

Related pull requests:
- 39227

Download

4.0.8 - R2989425 (March 26, 2025)

Integrations

Netskope (API v2)

Fixed an issue with last run time of dlp incidents.
Updated the Docker image to: demisto/python3:3.12.8.1983910.

Related pull requests:
- 38867
- 39118

Download

4.0.7 - 2763721 (March 12, 2025)

Netskope

Ensure that mirroring fields only appear in XSOAR integrations.

Related pull requests:
- 38998

Download

4.0.6 - 2306914 (February 9, 2025)

Integrations

Netskope (API v2)

Documentation and metadata improvements.

Related pull requests:
- 38531

Download

4.0.5 - R2040490 (January 22, 2025)

Integrations

Netskope (API v2)

Fixed an issue where the fetch-incidents command failed when the event type parameter was not set.

Related pull requests:
- 38089

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	April 14, 2020
Last Release	December 28, 2025

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.