Skip to main content

Shadow IT

Download With Dependencies

This Content Pack provides a new incident type for Shadow IT incidents, and a playbook to handle such scenarios.

The Shadow IT pack provides additional capabilities for handling Shadow IT incidents in Cortex XSOAR. A Shadow IT incident occurs when a resource attributed to the organization that is not sanctioned by IT nor protected by the InfoSec team is found.
This pack includes a new Shadow IT incident type and a playbook.

What does this pack do?
  • Provides an additional Shadow IT incident type.
  • Provides a Shadow IT indicator layout.
  • Provides a playbook to handle Shadow IT incidents (Handle Shadow IT Incident).

Handle Shadow IT Incident




Cortex XSOARCortex XSIAM


CertificationRead more
Supported ByCortex
CreatedDecember 30, 2020
Last ReleaseOctober 26, 2022

Content packs are licensed by the Publisher identified above and subject to the Publisher’s own licensing terms. Palo Alto Networks is not liable for and does not warrant or support any content pack produced by a third-party Publisher, whether or not such packs are designated as “Palo Alto Networks-certified” or otherwise. For more information, see the Marketplace documentation.