Netskope : Remediation Event

https://www.netskope.com/press-releases/netskope-introduces-first-complete-threat-protection-and-remediation-solution-for-enterprise-cloud-apps

Base Rule

Malware

Detected Malware Activity

Device Vendor

N/A

N/A

Device Product

N/A 

N/A

Device Version

N/A

N/A

Device Event Class ID

<vmid>

Text/String

Name of the event

N/A

N/A

Severity of the event

<severity>

Text/String

accessMethod

N/A

N/A

act

N/A

N/A

action

<action>
<tag1>

Text/String

appcategory

<subject>

Text/String

browser

N/A

N/A

cci

N/A

N/A

ccl

N/A

N/A

device

N/A

N/A

deviceClassification

N/A

N/A

dst

<dip>

IP Address

fsize

<size>

Number

hostname

N/A

N/A

md5

<hash>

Text/String

mimeType

N/A

N/A

mwDetectionEngine

N/A

N/A

mwDetectionName

<threatname>

Text/String

mwId

N/A

N/A

mwType

N/A

N/A

object

<object>

Text/String

os

N/A

N/A

policy

<policy>

Text/String

rAppSessionId

N/A

N/A

requestClientApplication

N/A

N/A

sourceServiceName

<process>

Text/String

src

<sip>

IP Address

suser

<login>

Text/String

timestamp

N/A

N/A

url

<url>

Text/String