Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1.
Netskope
- Details
- Content
- Dependencies
- Version History
Cloud access security broker that enables to find, understand, and secure cloud apps.
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Mapper | |
Netskope Outgoing Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Object ID | |
Netskope Action | |
Netskope Cloud Confidence Level | |
Netskope Original Status | |
Netskope Violations | |
Netskope Severity | |
Netskope Leak ID | |
Netskope Acknowledge | |
Netskope Quarantine File ID | |
Netskope Breach Date | |
Netskope Quarantine Profile ID | |
Netskope Access Method | |
Netskope Breach Description | |
Netskope DLP Profile | |
Netskope File Type | |
Netskope Timestamp | |
Netskope Object Type | |
Netskope Object | |
Netskope DLP Rule | |
Netskope Malware Type | |
Netskope Malware Name | |
Netskope Quarantine Policy | |
Netskope Original Severity | |
Netskope Breach Score | |
Netskope Malware ID | |
Netskope Site | |
Netskope Quarantine Profile | |
Netskope Breach Source | |
Netskope DLP Policy | |
Netskope Behavior Analytics Policy |
Incident Types
| Name | Description |
|---|---|
Netskope Behavior Analytics | |
Netskope Legal Hold | |
Netskope Compromised Credentials | |
Netskope Malware | |
Netskope DLP | |
Netskope Quarantine | |
Netskope Event | |
Netskope Malicious Sites | |
Netskope Alert | |
Netskope DLP Incident |
Integrations
| Name | Description |
|---|---|
| Netskope (API v1) | |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
Layouts
| Name | Description |
|---|---|
Netskope - DLP Incident Layout | |
Netskope - Compromised Credentials Layout | |
Netskope - User Analytics Layout | |
Netskope - DLP Layout | |
Netskope - Malware Layout | |
Netskope - Quarantine Layout |
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Mapper | |
Netskope Outgoing Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Leak ID | |
Netskope DLP Profile | |
Netskope Object ID | |
Netskope Timestamp | |
Netskope Original Severity | |
Netskope Quarantine File ID | |
Netskope Acknowledge | |
Netskope Quarantine Profile | |
Netskope Quarantine Profile ID | |
Netskope Violations | |
Netskope Severity | |
Netskope Breach Score | |
Netskope Action | |
Netskope Behavior Analytics Policy | |
Netskope Object | |
Netskope Breach Description | |
Netskope Site | |
Netskope Malware ID | |
Netskope Quarantine Policy | |
Netskope File Type | |
Netskope Object Type | |
Netskope Breach Date | |
Netskope DLP Rule | |
Netskope Cloud Confidence Level | |
Netskope Breach Source | |
Netskope Malware Type | |
Netskope Access Method | |
Netskope Malware Name | |
Netskope Original Status | |
Netskope DLP Policy |
Incident Types
| Name | Description |
|---|---|
Netskope Behavior Analytics | |
Netskope Malicious Sites | |
Netskope Malware | |
Netskope DLP | |
Netskope Quarantine | |
Netskope Compromised Credentials | |
Netskope Legal Hold | |
Netskope Event | |
Netskope DLP Incident | |
Netskope Alert |
Integrations
| Name | Description |
|---|---|
| Netskope Event Collector v2 | Netskope Event Collector v2 integration. |
| Netskope Event Collector (Deprecated) | Deprecated. Use Netskope Event Collector v2 instead. |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
Modeling Rules
| Name | Description |
|---|---|
Netskope Modeling Rule |
Required Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
Optional Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Common Types | By: Cortex XSOAR |
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
4.2.6 - 10935523 (July 12, 2026)
4.3.4 - 12871795 (September 8, 2026)
4.3.2 - 12411004 (August 27, 2026)
- 45670
Download
Integrations
Netskope (API v1)
- Updated the Fetch Incidents configuration parameters.
Modeling Rules
Netskope Modeling Rule
Fixed an issue where xdm.observer.action was not populated for network events, and for alert events of type network and malsite, because it was mapped to the activity field which is not present in those events.
- 45670
Download
4.3.0 - 12313702 (August 25, 2026)
4.2.6 - 10935523 (July 12, 2026)
4.1.1 - R5469292 (October 20, 2025)
- 41185
Download
Integrations
Netskope Event Collector v2
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.
Netskope Event Collector
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/python3:3.12.11.4508456.
- 41185
Download
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | April 14, 2020 | |
| Last Release | October 4, 2026 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
