Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment.
Netskope
- Details
- Content
- Dependencies
- Version History
Cloud access security broker that enables to find, understand, and secure cloud apps.
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Mapper | |
Netskope Outgoing Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope Quarantine Policy | |
Netskope Malware Name | |
Netskope Breach Source | |
Netskope Malware Type | |
Netskope Quarantine Profile ID | |
Netskope DLP Rule | |
Netskope Cloud Confidence Level | |
Netskope Original Severity | |
Netskope Severity | |
Netskope Breach Score | |
Netskope Behavior Analytics Policy | |
Netskope Breach Description | |
Netskope Quarantine File ID | |
Netskope Original Status | |
Netskope Timestamp | |
Netskope Object ID | |
Netskope Violations | |
Netskope DLP Policy | |
Netskope File Type | |
Netskope Acknowledge | |
Netskope Object | |
Netskope Quarantine Profile | |
Netskope Action | |
Netskope Access Method | |
Netskope Malware ID | |
Netskope DLP Profile | |
Netskope Leak ID | |
Netskope Site | |
Netskope Breach Date | |
Netskope Object Type |
Incident Types
| Name | Description |
|---|---|
Netskope DLP | |
Netskope Event | |
Netskope Legal Hold | |
Netskope Malicious Sites | |
Netskope DLP Incident | |
Netskope Behavior Analytics | |
Netskope Compromised Credentials | |
Netskope Malware | |
Netskope Quarantine | |
Netskope Alert |
Integrations
| Name | Description |
|---|---|
| Netskope (API v2) | |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
Layouts
| Name | Description |
|---|---|
Netskope - DLP Incident Layout | |
Netskope - Malware Layout | |
Netskope - Compromised Credentials Layout | |
Netskope - User Analytics Layout | |
Netskope - Quarantine Layout | |
Netskope - DLP Layout |
Classifiers
| Name | Description |
|---|---|
Netskope Classifier | |
Netskope Mapper | |
Netskope Outgoing Mapper |
Incident Fields
| Name | Description |
|---|---|
Netskope DLP Profile | |
Netskope Breach Source | |
Netskope Object | |
Netskope Access Method | |
Netskope Malware Type | |
Netskope Severity | |
Netskope Breach Date | |
Netskope Object ID | |
Netskope Quarantine File ID | |
Netskope Breach Score | |
Netskope File Type | |
Netskope Quarantine Policy | |
Netskope Malware Name | |
Netskope Original Status | |
Netskope Quarantine Profile | |
Netskope Site | |
Netskope DLP Policy | |
Netskope Malware ID | |
Netskope Breach Description | |
Netskope Acknowledge | |
Netskope Cloud Confidence Level | |
Netskope Object Type | |
Netskope Violations | |
Netskope DLP Rule | |
Netskope Original Severity | |
Netskope Timestamp | |
Netskope Leak ID | |
Netskope Action | |
Netskope Behavior Analytics Policy | |
Netskope Quarantine Profile ID |
Incident Types
| Name | Description |
|---|---|
Netskope Event | |
Netskope Malicious Sites | |
Netskope Compromised Credentials | |
Netskope Malware | |
Netskope Alert | |
Netskope DLP Incident | |
Netskope Legal Hold | |
Netskope DLP | |
Netskope Quarantine | |
Netskope Behavior Analytics |
Integrations
| Name | Description |
|---|---|
| Netskope Event Collector v2 | Netskope Event Collector v2 integration. |
| Netskope Event Collector (Deprecated) | Deprecated. Use Netskope Event Collector v2 instead. |
| Netskope (Deprecated) | Cloud access security broker that enables to find, understand, and secure cloud apps. Deprecated. Use Netskope (API v1) instead. |
| Netskope (API v1) | Get alerts and events, manage quarantine files as well as URL and hash lists using Netskope API v1. |
| Netskope (API v2) | Netskope API v2 provides a powerful interface for managing and monitoring Netskope deployments. It enables users to retrieve alerts and events, manage URL lists, and control clients. With Netskope API v2, organizations can proactively respond to security threats, enforce web access policies, and efficiently administer their Netskope environment. |
Modeling Rules
| Name | Description |
|---|---|
Netskope Modeling Rule |
Required Content Packs (2)
| Pack Name | Pack By |
|---|---|
| Base | By: Cortex XSOAR |
| Filters And Transformers | By: Cortex XSOAR |
Optional Content Packs (1)
| Pack Name | Pack By |
|---|---|
| Common Types | By: Cortex XSOAR |
All level dependencies (2)
| Pack Name | Pack By |
|---|---|
| Filters And Transformers | By: Cortex XSOAR |
| Base | By: Cortex XSOAR |
4.2.6 - 10935523 (July 12, 2026)
4.3.2 - 12411004 (August 27, 2026)
- 45670
Download
Integrations
Netskope (API v1)
- Updated the Fetch Incidents configuration parameters.
Modeling Rules
Netskope Modeling Rule
Fixed an issue where xdm.observer.action was not populated for network events, and for alert events of type network and malsite, because it was mapped to the activity field which is not present in those events.
- 45670
Download
4.3.0 - 12313702 (August 25, 2026)
4.2.6 - 10935523 (July 12, 2026)
4.1.1 - R5469292 (October 20, 2025)
- 41185
Download
Integrations
Netskope Event Collector v2
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/auth-utils:1.0.0.4578605.
Netskope Event Collector
- Lower the default limit for the get-events command to prevent overloading the playground.
- Updated the Docker image to: demisto/python3:3.12.11.4508456.
- 41185
Download
PUBLISHER
PLATFORMS
Cortex XSOARCortex XSIAM
INFO
| Certification | Certified | Read more |
| Supported By | Cortex | |
| Created | April 14, 2020 | |
| Last Release | September 6, 2026 |
WORKS WITH THE FOLLOWING INTEGRATIONS:
