Expanse Unmanaged Cloud Deprecated

Deprecated. No available replacement. Subplaybook for bringing rogue cloud accounts under management.

Cortex Xpanse by Palo Alto Networks (Deprecated) · 24 tasks · 3 inputs · 0 outputs

Inputs

  • ExpanseCloudManagedIssueId — The Expanse Issue ID associated with the incident
  • ExpanseCloudManagedIPv4 — The IP associated with an Expanse Issue
  • ExpanseCloudManagedEmailBody — Email body to send to potential owner

Commands used

certificate domain expanse-get-issue expanse-get-services send-mail

Flowchart

yes yes yes yes yes yes certificatePoC domainPoC subjectEmail yes yes Start Start Find Related Assets from Expanse Find Related Assets from ... expanse-get-services - expanse-get-services expanse-get-services expanse-get-services Was associated domain found? - Exists Was associated domain found? Exists Was associated certificate found? - Exists Was associated certificat... Exists Fetch Certificate - certificate Fetch Certificate certificate Fetch Domain - domain Fetch Domain domain Do Services Exist? - Exists Do Services Exist? Exists Is Asset Unmanaged? Is Asset Unmanaged? Is Incident Asset Unmanaged? Is Incident Asset Unmanaged? Fetch Issue From Expanse - expanse-get-issue Fetch Issue From Expanse expanse-get-issue Enrichment Enrichment Done Done Print Related Certificates - ToTable Print Related Certificates ToTable Do Related Emails Exist? Do Related Emails Exist? Print Found Certificates - ToTable Print Found Certificates ToTable Print Found Domains - ToTable Print Found Domains ToTable Domain Exists - Exists Domain Exists Exists Certificate Exists - Exists Certificate Exists Exists Send email to certificate Subject email - send-mail Send email to certificate... send-mail Send email to certificate owner - send-mail Send email to certificate... send-mail Send Email to domain owner - send-mail Send Email to domain owner send-mail Add Account to Prisma Cloud Add Account to Prisma Cloud Notify Potential Owner Notify Potential Owner