Netskope Client Steering Bypass, Tunnel Disable, or Uninstall
Detects command-line activity indicative of attempts to disable, bypass, uninstall, or interfere with the Netskope security agent functionality on an endpoint.
Microsoft Sentinel (KQL)

Detects command-line activity indicative of attempts to disable, bypass, uninstall, or interfere with the Netskope security agent functionality on an endpoint.

Already have an account?