Additional Discussions

Generally speaking, it is best practice to use service accounts when connecting to APIs, as the API would break if  specific admin credentials were to be disabled or deleted.

Though we built the Cloud Threat Exchange module of Cloud Exchange originally to facilitate the automated sharing between plugged-in security stack components of customer-specific threat indicators of compromise, including malURL, IP addresses involved in attacks, and malware filehashes, the tool is being used to meet other needs.  The Github plug-in we built within CTE scans designated GitHub repositories for the files each contains, and extracts the filehashes of the code and documentation. It then pushes this information into Netskope, specifically into the custom file list created by the admin and invoked within the Netskope CTE plugin configured to work the the customer tenant and that file. This information about files that are both *safe* and *proprietary* can then be used by the Netskope tenant and its exact data match (EDM) DLP function to prevent the uncontrolled sharing of these files in real-time. The same plug-in can be repurposed to look at code repos with Gitlab or

Many of our customers indicate that the only "essential" integrations are with identity providers, due to the nature of our identity-centric inline policy engine. Is this true for you?

Welcome to the Additional Discussions board! This is a place for us to discuss Advanced Analytics, DLP, Threat Protection, IaaS, and all other things cyber security & networking. Once we have critical mass around a conversation, we can create a new discussion board to specialize in your favorite topics. Happy posting!

<Thanks to Steve Johnson, SEM, North East for this Dashboard and the directions below.>   ----------------------------------------------------------------------------------------------------------------------- OVERVIEW: When using the "Risk Management: Cloud Services" Dashboard, located in the Advanced Analytics library,  you will want to customize the Report to focus on your specific "managed" and "unmanaged" cloud applications.  Below the steps to customize this dashboard to meet your needs.   -----------------------------------------------------------------------------------------------------------------------   PRELIMINARY STEPS: Clone the Dashboard using the following steps: https://support.netskope.com/hc/en-us/articles/360056831574-Netskope-Library Tagging Sanctioned vs. Unsanctioned Applications by using SkopeIT is the first policy oriented task to accomplish. Do not continue until this is done. Everything else builds upon this tagging

Question: Does Netskope store the entire file in forensics when we receive a DLP violation?