Netskope Help


The Incidents pages provide information about DLP incidents, anomalies, compromised credentials, and behavior analytics, plus files that have been quarantined or placed in legal hold. If you have a threat protection license, malware and malicious sites pages are shown here as well.

To view an Incidents page, click Incidents in the Netskope UI, and then click one of the links in the left panel.


The Incidents pages have many similar components, but do differ some ways. For example, the Anomalies page has a Summary component like the other Incident pages, which shows data graphs and stats, but also has Details and Configure pages that help you manage anomalies, and has two types of search functions. The search functions on some of the Incident pages slightly differ as well.


Click the Refresh icon to update an Incidents page with the most current information.