Skip to main content
Netskope app icon

Netskope

This app integrates with the Netskope to execute various investigative and polling actionsBuilt by srv-stage-community
soar product badge
Default Version 2.0.0

September 17, 2021

Compatibility

SOAR On-Prem

Platform Version: 5.5, 5.4, 5.3, 5.2, 5.1, 5.0, 4.10, 4.9, 4.8, 4.7, 4.6

Rating
0
(0)

Log in to rate this app

Support
Not Supported
Ranking

#3 in Endpoint

This app integrates with the Netskope to execute various investigative and polling actions

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration
  • get file: Download a quarantined file and upload it to the vault
  • get scim users: Get current SCIM user(s). If no parameter is sent, it will retrieve all users
  • get scim groups: Get current SCIM group(s). If no parameter is sent, it will retrieve all users
  • create scim group: Create SCIM group
  • create scim user: Create SCIM user
  • scim user group: Add or Remove a user from a SCIM group
  • list files: List all quarantined files
  • run query: Run query for events on a given IP
  • on poll: Ingest data to Phantom
  • add url: Add an URL to the Netskope URL Blocklist
  • remove url: Remove an URL from the Netskope URL Blocklist
  • update url: Send the url list to Netskope
  • add hash: Add a file hash to the Netskope file hash list
  • remove hash: Remove a hash from the Netskope file hash list
  • update hash: Send the file hash list to Netskope