netskope security cloud

Expression

product = "netskope security cloud"

Fields

There are no fields for this extension.

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
alert-trigger	site_at
	file_path	Legacy			✓
	additional_info
	bytes	Legacy		✓
	alert_id	Legacy			✓
	dest_ip	Legacy	✓	✓
	from_user_at
	hash_md5
	file_path_at
	user	Legacy		✓
	shared_with_at
	target
app-activity	country	Default			✓
	app_type	Default			✓
	domain_user_name
	src_ip	Default		✓
	src_translated_ip	Default			✓
	file_type	Default			✓
	action	Default			✓
	dest_port	Default			✓
	user_agent	Default			✓
	os	Default			✓
	resource	Default			✓
	file_name	Default			✓
	src_host	Default		✓
	url	Default			✓
	account_user_name
	auth_method	Default			✓
	web_domain	Default			✓
	additional_info	Default			✓
	bytes	Default			✓
	domain	Default			✓
	dest_ip	Default		✓
	dest_host	Default		✓
	location	Default			✓
	user	Default		✓
	account	Default		✓
	object	Default			✓
app-login	os	Default			✓
	src_host	Default		✓
	url	Default			✓
	src_ip	Default		✓
	auth_method	Default			✓
	web_domain	Default			✓
	bytes	Default			✓
	file_type	Default			✓
	dest_ip	Default		✓
	action	Default			✓
	location	Default			✓
	dest_port	Default			✓
	user_agent	Default			✓
	object	Default			✓
email-receive	src_ip	Default		✓
	os	Default			✓
	web_domain	Default			✓
	bytes	Default			✓
	browser	Default			✓
	action	Default			✓
	location	Default			✓
	src_host	Default		✓
	operation	Default			✓
	dest_port	Default			✓
	url	Default			✓
email-send	os	Default			✓
	src_host	Default		✓
	url	Default			✓
	src_ip	Default		✓
	web_domain	Default			✓
	bytes	Default			✓
	file_type	Default			✓
	browser	Default			✓
	action	Default			✓
	location	Default			✓
	operation	Default			✓
	dest_port	Default			✓
	user_agent	Default			✓
file-copy	os	Default			✓
	domain_user_name
	src_host	Default		✓
	url	Default			✓
	src_ip	Default		✓
	web_domain	Default			✓
	bytes	Default			✓
	file_type	Default			✓
	browser	Default			✓
	domain	Default			✓
	action	Default			✓
	location	Default			✓
	operation	Default			✓
	user	Default		✓
	dest_port	Default			✓
file-delete	os
	domain_user_name
	src_host	Legacy		✓
	url
	src_ip
	auth_method
	web_domain
	bytes
	file_type	Legacy			✓
	domain
	location
	user	Legacy	✓	✓
	dest_port
	user_agent
	object
file-download	os
	domain_user_name
	src_host	Legacy			✓
	url
	src_ip
	auth_method
	web_domain
	bytes	Legacy		✓
	file_type	Legacy			✓
	domain
	location
	user	Legacy	✓	✓
	dest_port
	user_agent
	object
file-list	os	Default			✓
	domain_user_name
	src_host	Default		✓
	url	Default			✓
	src_ip	Default		✓
	web_domain	Default			✓
	bytes	Default			✓
	file_type	Default			✓
	browser	Default			✓
	domain	Default			✓
	action	Default			✓
	location	Default			✓
	operation	Default			✓
	user	Default		✓
	dest_port	Default			✓
file-move	os	Default			✓
	domain_user_name
	src_host	Default		✓
	url	Default			✓
	src_ip	Default		✓
	web_domain	Default			✓
	bytes	Default			✓
	file_type	Default			✓
	browser	Default			✓
	domain	Default			✓
	action	Default			✓
	location	Default			✓
	operation	Default			✓
	user	Default		✓
	dest_port	Default			✓
file-permission-modify	os
	domain_user_name
	src_host
	url
	src_ip
	auth_method
	web_domain
	bytes
	file_type	Legacy			✓
	domain
	location
	user	Legacy	✓	✓
	dest_port
	user_agent
	object
file-read	os
	domain_user_name
	src_host	Legacy		✓
	url
	src_ip
	auth_method
	web_domain
	bytes	Legacy			✓
	file_type	Legacy			✓
	domain
	location
	user	Legacy	✓	✓
	dest_port
	user_agent
	object
file-upload	os
	domain_user_name
	src_host	Legacy			✓
	url
	src_ip
	auth_method
	web_domain
	bytes
	file_type	Legacy			✓
	domain
	location
	user	Legacy	✓	✓
	dest_port
	user_agent
	object
file-write	os
	domain_user_name
	src_host
	url
	src_ip
	auth_method
	web_domain
	bytes	Legacy		✓
	file_type	Legacy			✓
	domain
	browser
	action
	location
	user	Legacy	✓	✓
	operation
	dest_port
	user_agent
	object
group-member-list	os	Default			✓
	domain_user_name
	src_host	Default		✓
	url	Default			✓
	src_ip	Default		✓
	web_domain	Default			✓
	bytes	Default			✓
	browser	Default			✓
	domain	Default			✓
	action	Default			✓
	location	Default			✓
	operation	Default			✓
	user	Default		✓
	dest_port	Default			✓
group-member-remove	os
	domain_user_name
	src_host	Legacy		✓
	url
	src_ip
	web_domain
	bytes
	browser
	domain	Legacy			✓
	action
	location
	operation
	user	Legacy	✓	✓
	dest_port
http-session	src_location	Default			✓
	os	Default			✓
	src_country	Default			✓
	additional_info	Default			✓
	domain	Default			✓
	src_host	Default		✓
	category_ids	Default			✓
log-search	os	Default			✓
	domain_user_name
	src_host	Default		✓
	url	Default			✓
	src_ip	Default		✓
	web_domain	Default			✓
	bytes	Default			✓
	browser	Default			✓
	domain	Default			✓
	action	Default			✓
	location	Default			✓
	operation	Default			✓
	user	Default		✓
	dest_port	Default			✓
message-send	src_ip	Default		✓
	os	Default			✓
	web_domain	Default			✓
	bytes	Default			✓
	browser	Default			✓
	action	Default			✓
	location	Default			✓
	src_host	Default		✓
	operation	Default			✓
	dest_port	Default			✓
	url	Default			✓
network-session	src_translated_ip	Default			✓
	country_code	Default			✓
	domain	Default			✓
	location_city	Default			✓
	domain_user_name
	category	Default			✓
	user	Default		✓
	user_agent	Default			✓
user-create	src_ip
	os
	web_domain
	bytes
	browser
	action
	location
	src_host	Legacy		✓
	operation
	dest_port
	url
user-mfa-disable	os	Default			✓
	domain_user_name
	src_host	Default		✓
	url	Default			✓
	src_ip	Default		✓
	web_domain	Default			✓
	bytes	Default			✓
	browser	Default			✓
	domain	Default			✓
	action	Default			✓
	location	Default			✓
	operation	Default			✓
	user	Default		✓
	dest_port	Default			✓
user-password-delete	os	Default			✓
	domain_user_name
	src_host	Default		✓
	url	Default			✓
	src_ip	Default		✓
	web_domain	Default			✓
	bytes	Default			✓
	browser	Default			✓
	domain	Default			✓
	action	Default			✓
	location	Default			✓
	operation	Default			✓
	user	Default		✓
	dest_port	Default			✓
user-role-modify	os	Default			✓
	domain_user_name
	src_host	Default		✓
	url	Default			✓
	src_ip	Default		✓
	web_domain	Default			✓
	bytes	Default			✓
	browser	Default			✓
	domain	Default			✓
	action	Default			✓
	location	Default			✓
	operation	Default			✓
	user	Default		✓
	dest_port	Default			✓