Netskope - Unsanctioned/Risky Cloud App Access (Shadow IT)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Alerts when users access unsanctioned or risky cloud applications based on Cloud Confidence Level (CCL) and app tags. Detects Shadow IT usage.

Attribute Value
Type Analytic Rule
Solution NetskopeWebTx
ID cdc01279-d6ea-41b1-a32d-49d726be95b8
Severity Medium
Status Available
Kind Scheduled
Tactics InitialAccess, Exfiltration
Techniques T1199, T1567
Required Connectors NetskopeWebTxConnector
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
NetskopeWebTransactions_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to NetskopeWebTx