Skip to main content
Netskope app icon

Netskope

This app integrates with the Netskope to execute various investigative and polling actionsBuilt by SOAR Community
soar product badge
Default Version 4.1.1

July 16, 2026

Compatibility

SOAR On-Prem, SOAR Cloud

Platform Version: 8.7, 8.6, 8.5, 8.4, 8.0, 7.2, 7.1, 7.0, 6.4, 6.3

Rating
0
(0)

Log in to rate this app

Support
Not Supported
Ranking

#48 in Endpoint

This app integrates with the Netskope to execute various investigative and polling actions

Supported actions

  • test connectivity: Validate the asset configuration for connectivity using supplied configuration
  • get file: Download a quarantined file and upload it to the vault
  • get scim users: Get current SCIM user(s). If no parameter is sent, it will retrieve all users
  • get scim groups: Get current SCIM group(s). If no parameter is sent, it will retrieve all groups
  • create scim group: Create SCIM group
  • create scim user: Create SCIM user
  • scim user group: Add or Remove a user from a SCIM group
  • list files: List all quarantined files
  • run query: Run query for events on a given IP
  • on poll: Ingest data to Phantom
  • add url: Add an URL to the Netskope URL Blocklist
  • remove url: Remove an URL from the Netskope URL Blocklist
  • update url: Send the url list to Netskope
  • add hash: Add a file hash to the Netskope file hash list
  • remove hash: Remove a hash from the Netskope file hash list
  • update hash: Send the file hash list to Netskope