When Netskope is integrated with CrowdStrike EDR through the Cloud Exchange platform, the Remediation profile determines what automated action Netskope takes when malware is detected. Based on the profile shown in the exhibit, which is configured to push malware hashes as Indicators of Compromise (IOCs) to CrowdStrike, the action taken is that the malware file hash is added as an IOC within CrowdStrike’s threat intelligence platform. This enables CrowdStrike to block execution of that hash across all protected endpoints in the organization. The Netskope Cloud Threat Exchange (CTE) module facilitates this bidirectional IOC sharing between Netskope and CrowdStrike, enabling a coordinated threat response that bridges network-layer detection with endpoint-level enforcement.