Previous

Next

Netskope - Overview

Netskope - Alerts

Netskope - Application Events

Netskope - Audit Events

Netskope - Connection Events

Netskope - Incident Events

Netskope - Infrastructure Events

Netskope - Network Events

Overview

Netskope is a cloud security platform that provides security solutions to manage and secure cloud-based applications and data. Several features include cloud access security broker (CASB), data loss prevention (DLP), threat protection, and web security.

This integration monitors alerts triggered in Netskope as well as events generated for infrastructure, network, connection, audit, application, and incident. It also helps users visualize the alerts and events generated in Netskope by using various data-rich dashboards available out-of-the-box.

This integration includes the following Datadog Cloud SIEM detection rules for enhanced monitoring and security:

1. Netskope received DLP alerts for multiple blocked actions within one hour
2. Netskope observed large file transfer activity
3. Netskope detected low confidence cloud application interaction
4. Netskope detected multiple policy violations by a single user

Note: To use the out-of-the-box detection rules, the relevant integration must be installed in Datadog, and Cloud SIEM must be enabled.

Support

For support or feature requests, contact Crest Data through the following channels:

• Support Email: datadog.integrations@crestdata.ai
• Sales Email: datadog-sales@crestdata.ai
• Website: crestdata.ai
• FAQ: Crest Data Datadog Marketplace Integrations FAQ

This application is made available through the Datadog Marketplace and is supported by a Datadog Technology Partner. To use it, purchase this application in the Marketplace.