Discussions

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

Join Aaron Zhang, Analytics Specialist at Netskope for a conversation on how to get actionable insights with data and analytics about your environment, security posture and risk exposure. Bring your questions on Advanced Analytics and get step-by-step answers using a live Netskope environment.   This session is for Netskope Advanced Analytics customers, and aimed at engineers who have hands-on experience with Netskope. We welcome interaction so that you can learn from each other and share your personal experiences.   Agenda: 1.) Introductions 2.) Open Floor Q&A 3.) "Select a Use Case" 4.) Resources and where to get help

Hello Folks,    Below you can find a recap of questions asked at the December office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Happy New Year!   Q: I’m confused about custom dimensions in Advanced Analytics. Are there any resources I can review to better understand this feature? A: Yes. You can find a tutorial on custom fields (including custom dimensions) in

I am attempting to build an AA report from my OneDrive API connector, but I am finding it is working off alerts vs the API data. What I am trying to build is a report showing employees have used their OneDrive to share with external users the name of the file/folder, type, and size. I can get that data if it falls in the 90-day data window we have with AA, but I can't pull from the raw API over the life of the file/folder. I would just use the API Export, but it leaves off the shared with many times, so I was hoping AA would solve that.  Is that because AA is limited to only alerts within the subscription of data like 30/90 days?  Thank you  

  Hello Folks,   Below you can find a recap of questions asked at the Nov office hours session and those sent in that we were not able to cover during the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: Where can I get some resources to quickly get started with Advanced Analytics? A: We highly recommend starting with the NAA Training Resources post

I have two values I would like to display in a table widget, but I can't seem to find the right way to craft the custom field.  For both, I'm trying to extract a single value across mutliple individual alerts.1) I can easily get the number of users matching the criteria for the record, but I would prefer to display a list of the users. How can this be done without presenting a row for each user? I would much prefer to have them summarized into a single cell.2) The second summary field I would like to create is the "most recent" time across the individual records.Table I'm working withAny recommendations would be appreciated.

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’m new to Advanced Analytics. How and where can I start my journey? A: Netskope Advanced Analytics - Getting Started and

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: When I create a dashboard in Advanced Analytics, is it visible to everyone by default or just me? A: If you created the dashboard in your personal folder, it is visible to you only. If the dashboard is in the group folder, it will be visible to everyone in your environment.   Q: I want to unde

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last month and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’m looking for visibility into YouTube usage in my organization. Can Advanced Analytics help me with this? A: Sure! Please check the YouTube Activity Dashboard

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last week and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: How do I leverage Advanced Analytics for threat hunting activities?  A: Check out some blogs recently posted by Netskope’s internal security team including:  The

Web shells are commonly used by threat actors as part of the command and control phase of a cyberattack. These shells can be custom code and used by common C2 frameworks such as Cobalt Strike or be generated as a default payload in exploitation frameworks such as Metasploit. With this comes a challenge to security professionals on how to detect, mitigate, and hunt these shells that may be generated by an adversary during an attack. Netskope’s Advanced Analytics can be used in combination with Netskopes Cloud Firewall to create a dashboard that provides insight into where potential shell traffic is occurring within an organization's environment.    Uploaded with this community post is a Netskope Advance Analytics Dashboard that provides broad insight into where these potential shells may be occurring within an organization's environment.    The first Widget in the dashboard is the Ping dashboard. This sho

  As an essential feature of Advanced Analytics, adding "links" to a dashboard helps users precisely locate particular content. Simply by clicking the keyword with a URL attached, users will be directed to the webpage linked.   A link can be added in several ways. The easiest way is typing the syntax "[Keyword](URL)." By doing so, the webpage will be opened in the current window when users clicking the keyword.    However, this method does not work properly sometimes, and may give you the error message shown below.   To avoid the error, the best way is having th

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last week and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events Calendar!   Q: I’m new to Advanced Analytics. How and where can I start my journey? A: Netskope Advanced Analytics - Getting Started will help you get started quickly. More details can be found from our You

I've put together a quick map visualization, but I am not able to manipulate it in the manner I'd like to. The editing options have a lot of control over how the points at the end of the line display, but I'm not really interested in the ends.   Instead, I'd like to change how the lines are displayed.  Am I overlooking something, or should I open an Enhancement Request to expose formatting controls for the lines themselves?Specifically, I would like to color the line one end based on a string value associated with one of the points.

Several of the examples in the Netskope Library with Word Clouds visualization are for Justification.  As these are largely user-generated, they tend to be nearly universally unique.  Has there been any consideration of tokenizing these into either individual words (discarding filler words) or shorter phrases?   A drill-in on these could then expose the justifications that contain the selected word/phrase.

  Hello Folks,    Below you can find a recap of questions asked at the office hours sessions last week and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events calendar!   Q: I’m new to Advanced Analytics. How and where can I start my journey? A: Here is a link to a helpful video on how to get started quickly https://www.youtube.com/watch?v=R1X131ouyY0. We highly recommend starting with existing dashboards, either in the library or community. Tags can help you find dashboards you are interested in. You can

TL;DR Use dashboard filters to reduce data volume being loaded all at once (i,e. Date range, Category, User Group) Dashboards will load slow if they contain a lot of widgets; for best performance, keep widget count < 15 when creating dashboards Dashboards with custom fields and advanced features such as merged results and pivot will take longer to load Large number of data attributes/columns will affect dashboard loading time   The most important element of dashboard performance is the underlying SQL query performance. Each widget on the dashboard runs a SQL query that takes time to execute on the underlying database. Below are some considerations for creating perf

In Netskope R103, the UI for Advanced Analytics has a brand new look, and we think you’ll like it. That’s because based on the feedback from our user community, we’re making it easier for you to get the information you need, in a very personalized way. In some cases, we are adding new capabilities, such as the Persona profile so that you can quickly get information relevant to your job. In other areas, we’ve added quality of life improvements which makes many Advanced Analytics capabilities easier to find and use, such as favorite dashboards and counters to identify how many times a dashboard has been run.   The most immediate change you’ll notice is that Advanced Analytics now has an Overview page. In the past, admins would go di

Hello Folks,    Below you will find a recap of questions asked at the office hours sessions last week and those sent in that we were not able to cover at the session. Feel free to comment and continue the discussion, as well as attend future sessions that can be found on the Community Events calendar!   Q: How can I start to edit/customize a dashboard? A: Before customizing a dashboard, please copy and save the dashboard to your personal or group folder. To do this, click on the 3-dot button and then hit “Copy.” You can then select the destination folder with the dropdown menu (personal/group). By hitting “COPY HERE,” the dashboard will be saved to your selected folder. You can then find and start to edit the dashboard.