Leveraging Netskope for SOC or MSSP teams

The new SOC paradigm in the cloud era brings new possibilities but also some challenges. In the security operations that conform a SOC, mainly Threat Hunting Intelligence, SIEM & Analytics, Orchestration, Vulnerability Management and Forensics, Netskope can feed the SOC platform with events and alerts from its main pillars CASB, NG-SWG and CSPM, among others. This integration is mainly done by leveraging Netskope API REST pulling capabilities.

What you’ll learn: 

• Fundamental concepts on SOC Integration: the security ecosystem, the shared responsibility model, differences between the traditional and the new SOC paradigm
• Netskope integration with Splunk.
• Netskope event pulling time offset.
• Netskope App for Splunk Dashboards.