Advanced Analytics

Hello Everyone,Could someone guide me on how to integrate this report into our dashboard? Here's the link for reference:https://www.youtube.com/watch?v=SBQg6EaeWTU&ab_channel=NetskopeThanks in advance for your assistance!

Hi all, a few months ago we released the "SSL Inspection Dashboard" for Advanced Analytics. Find now a demo video about this dashboard on Youtube.   Happy watching!

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: When I create a dashboard in Advanced Analytics, is it visible to everyone by default or just me? A: If you created the dashboard in your personal folder, it is visible to you only. If the dashboard is in the group folder, it will be visible to everyone in your environment.   Q: I want to understand if my organization is using Netskope’s CASB product to its full potential. Can Advanced Analytics help me with this? A: Yes. The CASB Operationalization Dashboard can help! It helps you maximize the ROI of your Netskope investment by highlighting ways to ensure you are using Netskope to its full potential. The specific focus of this dashboard is operationalizati

  This dashboard helps you understand how Netskope is protecting your environment by quantifying risk reduction in $ as an impact to revenue and profit margin. The dashboard provides insights into two dimensions: Data Loss Prevention (DLP) Risk Reduction and Malware Risk Reduction.    For more details about how to further customize this dashboard based on your own environment, please check the customization guide here: https://community.netskope.com/t5/Advanced-Analytics-Dashboard/Reduction-of-Risk-Dashboard-Customization/ba-p/7391#M103.    Section 1: DLP Risk Reduction Calculation   This section provides visibility into data exfiltration attempts stopped/controlled by your Data Loss Prevention (DLP) policies and the corresponding $ in risk reduction. On the right hand side, the “Incidents Data” table gives a detailed view into Data Loss Prevention (DLP) incidents in your environment (e.g. Incident ID, Policy, Rule, User, etc.).    Please n

The purpose of this dashboard is to help you maximize the ROI of your Netskope investment by highlighting ways to ensure you are using Netskope to it's full potential. The specific focus of this dashboard is operationalization of the CASB product. Below you will find a breakdown of some of the views in this dashboard.    The first set of widgets focus on the NewEdge network and the POPs in use by your organization. These views help you determine if you need to optimize your POP selection settings.        Next you can see the number of users protected and steering methods used. Are the total users protected close to 100% of your organization size? Do you see the expected # of users protected? Are the access methods listed the expected ones? If not, these are red flags and we encourage to check the recommendations to resolve your issue.   After making sure the users are adequately covered, it is important to ensure that traffic is being inspected. The

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’m looking for visibility into YouTube usage in my organization. Can Advanced Analytics help me with this? A: Sure! Please check the YouTube Activity Dashboard from our community. This dashboard will give you an overview and approximation of the time users spend on YouTube.    Q: My organization is interested in learning when users are downloading from corporate applications to personal machines without the client installed. Is this possible? How to make sure it’s NOT from a managed device (possibly looking at non-corporate IP ranges)? A: In general, Netskope recommends that conditional access be used within the application management controls to lock

  This dashboard provides visibility into risk types (e.g. cloud storage uploads & email exfiltration) and their impact/volume in your organization, which helps you avoid potential data breach.   Please note that risk types are specified by the "Other Category" filter. If you want to explore any different risk types, don't forget to adjust the filter accordingly.   Feel free to download and view the dashboard in your own environment. Let us know if you have any questions.

Hello - We had setup Forward to Proxy integrations, does advance analytics capture data with respective to action = "Forward to Proxy"? If not, how do I get to see page events with action set to Forward to Proxy.Thanks

A vendor reaches out showing your employees’ usage data of their app. How can you better understand what your company’s actual usage is?    This dashboard can help you understand how much your organization is using a particular application, what kind of usage is detected (i.e. activities). This information can help you understand if you are over using (exceeding licensing agreement) or underusing an application (i.e. overpaying).       

This dashboard will give an overview and approximation of the time users spend on YouTube.    Identify total time spent on YouTube and see a breakdown of # of Users and # of Hours by Organization Unit:    Track total # of Events and Users:    View details of YouTube Activity:     Monitor usage over time:   Please Note: This dashboard leverage Period over Period Analysis to show changes month over month, to learn how to adjust your dashboard to use these, please check out this video.   

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last week and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: How do I leverage Advanced Analytics for threat hunting activities?  A: Check out some blogs recently posted by Netskope’s internal security team including:  The Threat Hunting Process Threat Hunting: Suspected Shell Traffic in Advanced Analytics Investigating .zip and .mov top-level domains   Q: I’m new to Advanced Analytics. How and where can I start my journey? A: Netskope Advanced Analytics - Getting Started will help you get started in about 5 minutes. For a more indepth getting started guide, check out our recent webinar Getting Started with Advanced Analytics.   Q: How can I leverage Advanced Analytics to properly measure policy e

Web shells are commonly used by threat actors as part of the command and control phase of a cyberattack. These shells can be custom code and used by common C2 frameworks such as Cobalt Strike or be generated as a default payload in exploitation frameworks such as Metasploit. With this comes a challenge to security professionals on how to detect, mitigate, and hunt these shells that may be generated by an adversary during an attack. Netskope’s Advanced Analytics can be used in combination with Netskopes Cloud Firewall to create a dashboard that provides insight into where potential shell traffic is occurring within an organization's environment.    Uploaded with this community post is a Netskope Advance Analytics Dashboard that provides broad insight into where these potential shells may be occurring within an organization's environment.    The first Widget in the dashboard is the Ping dashboard. This shows ping traffic within the organization's environment. Dependin

  As an essential feature of Advanced Analytics, adding "links" to a dashboard helps users precisely locate particular content. Simply by clicking the keyword with a URL attached, users will be directed to the webpage linked.   A link can be added in several ways. The easiest way is typing the syntax "[Keyword](URL)." By doing so, the webpage will be opened in the current window when users clicking the keyword.    However, this method does not work properly sometimes, and may give you the error message shown below.   To avoid the error, the best way is having the URL linked and opened to a new tab, not in the current window. The syntax template in this case is "<a href="URL" target="_blank">Keyword</a>."    By doing so, the webpage linked will then be opened in a new tab when users clicking the keyword.   A sample dashboard is also attached below. Feel free to let us know if you have any questions on this topic. Happy to help

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last week and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’m new to Advanced Analytics. How and where can I start my journey? A: Netskope Advanced Analytics - Getting Started will help you get started quickly. More details can be found from our YouTube Channel. We highly recommend starting with existing dashboards, either in the library or community. Tags can help you find dashboards you are interested in. You can explore any dashboards based on your needs, and customize them in your environment. You can also find tons of resources (e.g., hot topic discussion, dashboard intro, and upcoming AA events, etc.) here on the Netskope Community. On July 13th, 2023, we will be hosting a “Getting started with Advanced Analytics”

Hello Everyone!   I'm passionate about ensuring our customers see value from the data and analytics provided by Netskope Advanced Analytics. Please take this survey and share how this tool has helped identify gaps and improved your environment!   We use a platform called UserEvidence to collect this feedback. In return for your insights we will send you a $25 digital gift card or charity contribution for your time. This is completely optional, but something we like to include to say thank you.    Surveys submitted prior to July 1st, will be eligible for this incentive. 

In some organizations it is important to understand what new applications users are using in the environment. New applications can pose certain risks (e.g. new apps used for PDF conversion or translation could inadvertently cause data loss), and they may also introduce redundancy and inefficiency (e.g. if someone starts using a new collaboration app, but the organization already has a company sanction app that is being paid for).  The dashboard attached helps organization identify new apps and ones no longer in use.  It consists of 2 view, one for new applications in the last 30 days:  and one for application not used in the last 30 days:  Important Notes: Advanced Analytics has a 5000 row limit. In organizations with more than 5000 applications, results will be unreliable. The general recommendation would be not to use this dashboard. If you have a high need for this information and have over 5k apps, please reach out to us for an alternate solution.  For this dashboard, to give relia

Provide analytics on logs/data gathered via Discovery. Including a view of Shadow IT and application Risk. While it can be used with Inline NS products it was inspired by clients that just leverage Discovery & Risk Insights.

I've put together a quick map visualization, but I am not able to manipulate it in the manner I'd like to. The editing options have a lot of control over how the points at the end of the line display, but I'm not really interested in the ends.   Instead, I'd like to change how the lines are displayed.  Am I overlooking something, or should I open an Enhancement Request to expose formatting controls for the lines themselves?Specifically, I would like to color the line one end based on a string value associated with one of the points.