Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead.
Netskope
- Details
- Content
- Dependencies
- Version History
Cloud access security broker that enables to find, understand, and secure cloud apps.
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Mapper | |
Netskope Outgoing Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Breach Date | |
Netskope Breach Score | |
Netskope Malware ID | |
Netskope Malware Name | |
Netskope Object | |
Netskope Malware Type | |
Netskope DLP Policy | |
Netskope Access Method | |
Netskope File Type | |
Netskope Breach Source | |
Netskope Breach Description | |
Netskope Acknowledge | |
Netskope DLP Rule | |
Netskope Action | |
Netskope Object ID | |
Netskope Cloud Confidence Level | |
Netskope Behavior Analytics Policy | |
Netskope Site | |
Netskope Timestamp | |
Netskope Quarantine Profile | |
Netskope Violations | |
Netskope Leak ID | |
Netskope Original Status | |
Netskope Severity | |
Netskope Quarantine Profile ID | |
Netskope DLP Profile | |
Netskope Quarantine File ID | |
Netskope Object Type | |
Netskope Original Severity | |
Netskope Quarantine Policy |
Incident Types
| Name | Description |
|---|---|
Netskope Compromised Credentials | |
Netskope Malicious Sites | |
Netskope Behavior Analytics | |
Netskope Legal Hold | |
Netskope DLP Incident | |
Netskope Malware | |
Netskope Quarantine | |
Netskope Alert | |
Netskope Event | |
Netskope DLP |
Integrations
| Name | Description |
|---|---|
| Netskope (Deprecated) | |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
Layouts
| Name | Description |
|---|---|
Netskope - Malware Layout | |
Netskope - Quarantine Layout | |
Netskope - User Analytics Layout | |
Netskope - DLP Layout | |
Netskope - Compromised Credentials Layout | |
Netskope - DLP Incident Layout |
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Mapper | |
Netskope Outgoing Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Violations | |
Netskope Quarantine File ID | |
Netskope Leak ID | |
Netskope Acknowledge | |
Netskope Malware ID | |
Netskope Quarantine Profile | |
Netskope Quarantine Profile ID | |
Netskope Breach Source | |
Netskope Site | |
Netskope Access Method | |
Netskope DLP Rule | |
Netskope Breach Score | |
Netskope Original Status | |
Netskope Breach Description | |
Netskope Object | |
Netskope DLP Policy | |
Netskope Malware Type | |
Netskope Object ID | |
Netskope Original Severity | |
Netskope Action | |
Netskope Severity | |
Netskope DLP Profile | |
Netskope Malware Name | |
Netskope Cloud Confidence Level | |
Netskope Object Type | |
Netskope Breach Date | |
Netskope Behavior Analytics Policy | |
Netskope File Type | |
Netskope Quarantine Policy | |
Netskope Timestamp |
Incident Types
| Name | Description |
|---|---|
Netskope DLP | |
Netskope Behavior Analytics | |
Netskope Legal Hold | |
Netskope Alert | |
Netskope Malicious Sites | |
Netskope DLP Incident | |
Netskope Compromised Credentials | |
Netskope Quarantine | |
Netskope Malware | |
Netskope Event |
Integrations
| Name | Description |
|---|---|
| Netskope Event Collector v2 | Netskope Event Collector v2 integration. |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
| Netskope Event Collector (Deprecated) | Deprecated. Use Netskope Event Collector v2 instead. |
Modeling Rules
| Name | Description |
|---|---|
Netskope Modeling Rule |
Required Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
Optional Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Common Types | By: Cortex XSOAR |
All level dependencies (3)
| Pack Name | Pack By |
|---|---|
| Aggregated Scripts | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
4.1.1 - R5469292 (October 20, 2025)
- 41185
Download
Integrations
Netskope Event Collector v2
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.
Netskope Event Collector
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/python3:3.12.11.4508456.
- 41185
Download
4.0.10 - 4096037 (July 8, 2025)
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | April 14, 2020 | |
| Last Release | May 25, 2026 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
