Advanced Analytics

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

Hello Folks,    Below you can find a recap of questions asked at the December office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Happy New Year!   Q: I’m confused about custom dimensions in Advanced Analytics. Are there any resources I can review to better understand this feature? A: Yes. You can find a tutorial on custom fields (including custom dimensions) in this training video. This article from Netskope Knowledge Portal can also help.   Q: I’m looking for a tutorial on Netskope Data Loss Prevention (DLP). A: This article provides a list of resources on Netskope DLP, which can be a great starting point. If you are interested in best practices and a deep dive into this topic, please watch this webinar.   Q: Can I view Chrome versions detected in my organization and how many peopl

I am attempting to build an AA report from my OneDrive API connector, but I am finding it is working off alerts vs the API data. What I am trying to build is a report showing employees have used their OneDrive to share with external users the name of the file/folder, type, and size. I can get that data if it falls in the 90-day data window we have with AA, but I can't pull from the raw API over the life of the file/folder. I would just use the API Export, but it leaves off the shared with many times, so I was hoping AA would solve that.  Is that because AA is limited to only alerts within the subscription of data like 30/90 days?  Thank you  

  Hello Folks,   Below you can find a recap of questions asked at the Nov office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: Where can I get some resources to quickly get started with Advanced Analytics? A: We highly recommend starting with the NAA Training Resources post in our community. The post points you to a list of resources which can help you quickly get started with Advanced Analytics. If you are looking for some recommended dashboards to start with, the NAA Top Dashboards post will be a good choice.   Q: We are looking for insights for Board & Executives reporting, including AI. Can I leverage Advanced Analytics on this? A: Sure. For AI-related topics, we recommend starting with the AI Usage Dashboard in Netskope Library, which helps you understand how AI apps & sites are

I hope I'm overlooking something basic again, but...I would really love to see a way that some properties could be defined once and reused across multiple reports.   Not just at the widget level.   I'm thinking more granular.   I would love to just define a custom extraction once and have it available in the Custom section for every future explore of the same logtype.    Similarly, I would love to define "my domains" (or any other relatively static value) as a variable and have it available for every future report. This would be especially useful for the Netskope Library.   Many of the default reports all have the same "copy this report, edit that, and save a new version" guidance; but often what is being edited is the same 2 -3 sets of data.   If these were able to reference a common variable, there would be no need to reverse engineer the reports every time a new version is released.  

I have two values I would like to display in a table widget, but I can't seem to find the right way to craft the custom field.  For both, I'm trying to extract a single value across mutliple individual alerts.1) I can easily get the number of users matching the criteria for the record, but I would prefer to display a list of the users. How can this be done without presenting a row for each user? I would much prefer to have them summarized into a single cell.2) The second summary field I would like to create is the "most recent" time across the individual records.Table I'm working withAny recommendations would be appreciated.

 When leveraging Advanced Analytics on your use cases, the existing dashboards in Netskope Library & Community are always good starting points. While you can find any dashboards you are interested in by searching particular keywords or tags, we strongly recommend checking our top dashboards below: CASB Health Check Dashboard: This dashboard helps you maximize the ROI of your Netskope investment by highlighting ways to ensure you are using Netskope to its full potential. The specific focus of this dashboard is operationalization of the CASB product.NG-SWG Health Check Dashboard: This dashboard shares the same purpose with the CASB dashboard above, but with a focus on NG-SWG product. Cloud Risk Assessment - QBR Dashboard (in Netskope Library): This dashboard provides a high-level overview of the risk assessment in your environment, including visibility into cloud traffic, cloud threats, high risk user activities, etc. It answers the question “how users and data have been protected by

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’m new to Advanced Analytics. How and where can I start my journey? A: Netskope Advanced Analytics - Getting Started and “Getting Started” Webinar will help you get started quickly. More details can be found from our YouTube Channel. We highly recommend starting with existing dashboards, either in Netskope Library or Community. Tags can help you find dashboards you are interested in. You can explore any dashboards based on your needs, and customize them in your environment. You can also find tons of resources (e.g., hot topic discussion, dashboard intro, and upcoming AA events, etc.) here on the Netskope Community.   Q: Regarding API protection, I’m lookin

This dashboard is ideal for monitoring overall activity in Microsoft 365. Some of the questions this dashboard answers include:   • How much is Microsoft 365 being used?• What Microsoft 365 instances are being used?• Who are the active users? What activities are they performing? • What are the DLP violations tied to Microsoft 365?• What malware events are tied to Microsoft 365?• What is the compliance posture of Microsoft 365?         

Hello Everyone,Could someone guide me on how to integrate this report into our dashboard? Here's the link for reference:https://www.youtube.com/watch?v=SBQg6EaeWTU&ab_channel=NetskopeThanks in advance for your assistance!

Hi all, a few months ago we released the "SSL Inspection Dashboard" for Advanced Analytics. Find now a demo video about this dashboard on Youtube.   Happy watching!

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: When I create a dashboard in Advanced Analytics, is it visible to everyone by default or just me? A: If you created the dashboard in your personal folder, it is visible to you only. If the dashboard is in the group folder, it will be visible to everyone in your environment.   Q: I want to understand if my organization is using Netskope’s CASB product to its full potential. Can Advanced Analytics help me with this? A: Yes. The CASB Operationalization Dashboard can help! It helps you maximize the ROI of your Netskope investment by highlighting ways to ensure you are using Netskope to its full potential. The specific focus of this dashboard is operationalizati

  This dashboard helps you understand how Netskope is protecting your environment by quantifying risk reduction in $ as an impact to revenue and profit margin. The dashboard provides insights into two dimensions: Data Loss Prevention (DLP) Risk Reduction and Malware Risk Reduction.    For more details about how to further customize this dashboard based on your own environment, please check the customization guide here: https://community.netskope.com/t5/Advanced-Analytics-Dashboard/Reduction-of-Risk-Dashboard-Customization/ba-p/7391#M103.    Section 1: DLP Risk Reduction Calculation   This section provides visibility into data exfiltration attempts stopped/controlled by your Data Loss Prevention (DLP) policies and the corresponding $ in risk reduction. On the right hand side, the “Incidents Data” table gives a detailed view into Data Loss Prevention (DLP) incidents in your environment (e.g. Incident ID, Policy, Rule, User, etc.).    Please n

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’m looking for visibility into YouTube usage in my organization. Can Advanced Analytics help me with this? A: Sure! Please check the YouTube Activity Dashboard from our community. This dashboard will give you an overview and approximation of the time users spend on YouTube.    Q: My organization is interested in learning when users are downloading from corporate applications to personal machines without the client installed. Is this possible? How to make sure it’s NOT from a managed device (possibly looking at non-corporate IP ranges)? A: In general, Netskope recommends that conditional access be used within the application management controls to lock

  This dashboard provides visibility into risk types (e.g. cloud storage uploads & email exfiltration) and their impact/volume in your organization, which helps you avoid potential data breach.   Please note that risk types are specified by the "Other Category" filter. If you want to explore any different risk types, don't forget to adjust the filter accordingly.   Feel free to download and view the dashboard in your own environment. Let us know if you have any questions.

Hello - We had setup Forward to Proxy integrations, does advance analytics capture data with respective to action = "Forward to Proxy"? If not, how do I get to see page events with action set to Forward to Proxy.Thanks

A vendor reaches out showing your employees’ usage data of their app. How can you better understand what your company’s actual usage is?    This dashboard can help you understand how much your organization is using a particular application, what kind of usage is detected (i.e. activities). This information can help you understand if you are over using (exceeding licensing agreement) or underusing an application (i.e. overpaying).       

This dashboard will give an overview and approximation of the time users spend on YouTube.    Identify total time spent on YouTube and see a breakdown of # of Users and # of Hours by Organization Unit:    Track total # of Events and Users:    View details of YouTube Activity:     Monitor usage over time:   Please Note: This dashboard leverage Period over Period Analysis to show changes month over month, to learn how to adjust your dashboard to use these, please check out this video.