Netskope : Remediation Event

Vendor Documentation

https://www.netskope.com/press-releases/netskope-introduces-first-complete-threat-protection-and-remediation-solution-for-enterprise-cloud-apps

Classification

Rule Name	Rule Type	Classification	Common Event
Netskope : Remediation Event	Base Rule	Malware	Detected Malware Activity

Mapping with LogRhythm Schema

Device Key in Log Message	LogRhythm Schema	Data Type
Device Vendor	N/A	N/A
Device Product	N/A	N/A
Device Version	N/A	N/A
Device Event Class ID	<vmid>	Text/String
Name of the event	N/A	N/A
Severity of the event	<severity>	Text/String
accessMethod	N/A	N/A
act	N/A	N/A
action	<action> <tag1>	Text/String
appcategory	<subject>	Text/String
browser	N/A	N/A
cci	N/A	N/A
ccl	N/A	N/A
device	N/A	N/A
deviceClassification	N/A	N/A
dst	<dip>	IP Address
fsize	<size>	Number
hostname	N/A	N/A
md5	<hash>	Text/String
mimeType	N/A	N/A
mwDetectionEngine	N/A	N/A
mwDetectionName	<threatname>	Text/String
mwId	N/A	N/A
mwType	N/A	N/A
object	<object>	Text/String
os	N/A	N/A
policy	<policy>	Text/String
rAppSessionId	N/A	N/A
requestClientApplication	N/A	N/A
sourceServiceName	<process>	Text/String
src	<sip>	IP Address
suser	<login>	Text/String
timestamp	N/A	N/A
url	<url>	Text/String

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.