Skip to main content

Netskope Help

Endpoint Detection and Response

Certain applications allow admins to query and collect data, like clients installed on each individual system in your network. The applications also have the capability to protect and mitigate against threats by performing actions on your systems. These applications provide indicators of compromise (IOC) data and trigger remediation to protect integrated systems from getting infected from attacks found by Netskope Threat Protection. 

Endpoint Detection and Response (EDR) applications monitor endpoints for suspicious activity and provide visibility into malware and other cyber threats. Netskope supports Carbon Black and CrowdStrike for EDR integrations. A Standard Threat Protection license is required.

Upon detection, EDR alerts appear in the Netksope UI on the Skope IT Pages.