This Content Pack provides a new incident type for Shadow IT incidents, and a playbook to handle such scenarios.
The Shadow IT pack provides additional capabilities for handling Shadow IT incidents in Cortex XSOAR. A Shadow IT incident occurs when a resource attributed to the organization that is not sanctioned by IT nor protected by the InfoSec team is found.
This pack includes a new Shadow IT incident type and a playbook.
What does this pack do?
- Provides an additional Shadow IT incident type.
- Provides a Shadow IT indicator layout.
- Provides a playbook to handle Shadow IT incidents (Handle Shadow IT Incident).

The Shadow IT pack provides additional capabilities for handling Shadow IT incidents in Cortex. A Shadow IT incident occurs when a resource attributed to the organization that is not sanctioned by IT nor protected by the InfoSec team is found.
This pack includes a new Shadow IT incident type and a playbook.
What does this pack do?
- Provides an additional Shadow IT incident type.
- Provides a Shadow IT indicator layout.
- Provides a playbook to handle Shadow IT incidents (Handle Shadow IT Incident).
