Netskope

Details
Content
Dependencies
Version History

Cloud access security broker that enables to find, understand, and secure cloud apps.

Classifiers

Name	Description
Netskope Classifier
Netskope Outgoing Mapper
Netskope Mapper

Incident Fields

Name	Description
Netskope Object ID
Netskope Breach Score
Netskope Behavior Analytics Policy
Netskope Breach Description
Netskope Severity
Netskope Original Severity
Netskope Object Type
Netskope Breach Source
Netskope DLP Policy
Netskope Quarantine Policy
Netskope Quarantine Profile
Netskope Access Method
Netskope Acknowledge
Netskope Action
Netskope Malware ID
Netskope Breach Date
Netskope Quarantine File ID
Netskope Leak ID
Netskope Malware Type
Netskope DLP Profile
Netskope Quarantine Profile ID
Netskope Original Status
Netskope Malware Name
Netskope DLP Rule
Netskope Timestamp
Netskope Object
Netskope Site
Netskope Violations
Netskope Cloud Confidence Level
Netskope File Type

Incident Types

Name	Description
Netskope Alert
Netskope DLP
Netskope Quarantine
Netskope Malicious Sites
Netskope Behavior Analytics
Netskope Event
Netskope DLP Incident
Netskope Malware
Netskope Legal Hold
Netskope Compromised Credentials

Integrations

Name	Description
Netskope (API v1)	Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
Netskope (Deprecated)	Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead.
Netskope (API v2)	Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.

Layouts

Name	Description
Netskope - DLP Incident Layout
Netskope - DLP Layout
Netskope - Compromised Credentials Layout
Netskope - Malware Layout
Netskope - User Analytics Layout
Netskope - Quarantine Layout

Classifiers

Name	Description
Netskope Classifier
Netskope Mapper
Netskope Outgoing Mapper

Incident Fields

Name	Description
Netskope Breach Score
Netskope Acknowledge
Netskope Breach Source
Netskope Behavior Analytics Policy
Netskope Action
Netskope Access Method
Netskope Timestamp
Netskope DLP Profile
Netskope Malware Type
Netskope Object Type
Netskope Breach Description
Netskope Quarantine Profile ID
Netskope Original Status
Netskope Site
Netskope Object ID
Netskope Quarantine File ID
Netskope Violations
Netskope Breach Date
Netskope Leak ID
Netskope Original Severity
Netskope Malware ID
Netskope Quarantine Policy
Netskope DLP Rule
Netskope Malware Name
Netskope Quarantine Profile
Netskope Object
Netskope File Type
Netskope Severity
Netskope DLP Policy
Netskope Cloud Confidence Level

Incident Types

Name	Description
Netskope Malicious Sites
Netskope Malware
Netskope DLP
Netskope DLP Incident
Netskope Legal Hold
Netskope Behavior Analytics
Netskope Quarantine
Netskope Event
Netskope Alert
Netskope Compromised Credentials

Integrations

Name	Description
Netskope Event Collector v2	Netskope Event Collector v2 integration.
Netskope (API v2)	Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.
Netskope (API v1)	Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
Netskope (Deprecated)	Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead.
Netskope Event Collector (Deprecated)	Deprecated. Use Netskope Event Collector v2 instead.

Modeling Rules

Name	Description
Netskope Modeling Rule

Required Content Packs (2)

Pack Name	Pack By
Base	By: Cortex XSOAR
Filters And Transformers	By: Cortex XSOAR

Optional Content Packs (1)

Pack Name	Pack By
Common Types	By: Cortex XSOAR

All level dependencies (3)

Pack Name	Pack By
Filters And Transformers	By: Cortex XSOAR
Aggregated Scripts	By: Cortex XSOAR
Base	By: Cortex XSOAR

4.2.2 - 8210013 (April 13, 2026)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 43748

Download

4.2.1 - 7843807 (March 22, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43568

Download

4.2.0 - 6456962 (December 28, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 42425

Download

4.1.4 - 6088397 (December 1, 2025)

Integrations

Netskope (API v2)

Fixed an issue where large number values, such as incident IDs, were corrupted due to precision loss.

Related pull requests:
- 42003

Download

4.1.3 - 5818832 (November 11, 2025)

Integrations

Netskope (API v2)

Documentation and Metadata improvements.
Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41855

Download

4.1.2 - 5636304 (October 29, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41629

Download

4.1.1 - R5469292 (October 20, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 41185

Download

4.1.0 - 4519710 (August 13, 2025)

Changes are not relevant for XSOAR marketplace.

Related pull requests:
- 40717

Download

4.0.10 - 4096037 (July 8, 2025)

Integrations

Netskope (API v1)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Netskope (API v2)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 40498

Download

4.0.9 - R3980324 (June 26, 2025)

Integrations

Netskope (API v1)

Metadata and documentation improvements.

Netskope (API v2)

Metadata and documentation improvements.

Related pull requests:
- 39227

Download

4.2.2 - 8210013 (April 13, 2026)

Integrations

Netskope Event Collector v2

Documentation and metadata improvements.

Netskope Event Collector (Deprecated)

Documentation and metadata improvements.

Related pull requests:
- 43748

Download

4.2.1 - 7850318 (March 23, 2026)

Documentation and metadata improvements.

Related pull requests:
- 43568

Download

4.2.0 - 6456962 (December 28, 2025)

Integrations

Netskope Event Collector (Deprecated)

Deprecated. Use Netskope Event Collector v2 instead.

Related pull requests:
- 42425

Download

4.1.4 - 6088397 (December 1, 2025)

Integrations

Netskope (API v2)

Fixed an issue where large number values, such as incident IDs, were corrupted due to precision loss.

Related pull requests:
- 42003

Download

4.1.3 - 5818832 (November 11, 2025)

Integrations

Netskope (API v2)

Documentation and Metadata improvements.
Updated the Docker image to: demisto/python3:3.12.12.5490952.

Related pull requests:
- 41855

Download

4.1.2 - 5636304 (October 29, 2025)

Changes are not relevant for XSIAM marketplace.

Related pull requests:
- 41629

Download

4.1.1 - R5469292 (October 20, 2025)

Integrations

Netskope Event Collector v2

Lower the default limit for the get-events command to prevent overloading the playground.
Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.

Netskope Event Collector

Lower the default limit for the get-events command to prevent overloading the playground.
Updated the Docker image to: demisto/python3:3.12.11.4508456.

Related pull requests:
- 41185

Download

4.1.0 - 4524270 (August 14, 2025)

Integrations

New: Netskope Event Collector v2

Netskope Event Collector integration has been reworked to improve its ability to handle large amounts of data. This is achieved via a new endpoint and an asynchronous mechanism.

Related pull requests:
- 40717

Download

4.0.10 - 4096037 (July 8, 2025)

Integrations

Netskope (API v1)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Netskope Event Collector

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Netskope (API v2)

Updated the Docker image to: demisto/python3:3.12.8.3296088.

Related pull requests:
- 40498

Download

4.0.9 - R3980324 (June 26, 2025)

Integrations

Netskope Event Collector

Metadata and documentation improvements.

Netskope (API v1)

Metadata and documentation improvements.

Netskope (API v2)

Metadata and documentation improvements.

Related pull requests:
- 39227

Download

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

Certification	Certified	Read more
Supported By	Cortex
Created	April 14, 2020
Last Release	April 13, 2026

WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise.