Netskope

This app integrates with the Netskope to execute various investigative and polling actions

Supported Actions

• test connectivity: Validate the asset configuration for connectivity using supplied configuration
• get file: Download a quarantined file and upload it to the vault
• get scim users: Get current SCIM user(s). If no parameter is sent, it will retrieve all users
• get scim groups: Get current SCIM group(s). If no parameter is sent, it will retrieve all groups
• create scim group: Create SCIM group
• create scim user: Create SCIM user
• scim user group: Add or Remove a user from a SCIM group
• list files: List all quarantined files
• run query: Run query for events on a given IP
• on poll: Ingest data to Phantom
• add url: Add an URL to the Netskope URL Blocklist
• remove url: Remove an URL from the Netskope URL Blocklist
• update url: Send the url list to Netskope
• add hash: Add a file hash to the Netskope file hash list
• remove hash: Remove a hash from the Netskope file hash list
• update hash: Send the file hash list to Netskope