Skip to main content

Shadow IT

Download With Dependencies

This Content Pack provides a new incident type for Shadow IT incidents, and a playbook to handle such scenarios.

The Shadow IT pack provides additional capabilities for handling Shadow IT incidents in Cortex XSOAR. A Shadow IT incident occurs when a resource attributed to the organization that is not sanctioned by IT nor protected by the InfoSec team is found.
This pack includes a new Shadow IT incident type and a playbook.

What does this pack do?
  • Provides an additional Shadow IT incident type.
  • Provides a Shadow IT indicator layout.
  • Provides a playbook to handle Shadow IT incidents (Handle Shadow IT Incident).

Handle Shadow IT Incident

The Shadow IT pack provides additional capabilities for handling Shadow IT incidents in Cortex. A Shadow IT incident occurs when a resource attributed to the organization that is not sanctioned by IT nor protected by the InfoSec team is found.
This pack includes a new Shadow IT incident type and a playbook.

What does this pack do?
  • Provides an additional Shadow IT incident type.
  • Provides a Shadow IT indicator layout.
  • Provides a playbook to handle Shadow IT incidents (Handle Shadow IT Incident).

Handle Shadow IT Incident

PUBLISHER

PLATFORMS

Cortex XSOARCortex XSIAM

INFO

CertificationRead more
Supported ByCortex
CreatedDecember 30, 2020
Last ReleaseMarch 22, 2026
Compliance
WORKS WITH THE FOLLOWING INTEGRATIONS:

DISCLAIMER
By downloading or using Marketplace content, you agree to the applicable Terms of Use and End User License Agreement. Third-party content is provided by its publisher, and Palo Alto Networks does not warrant, endorse, support, or assume responsibility for content not expressly identified as owned by Palo Alto Networks.