ExpansePrintSuggestions Deprecated

Deprecated. No available replacement. > Generates and prints a report in markdown format containing useful suggestions for the Analyst to attribute an Expanse Issue to an owner.

python · Cortex Xpanse by Palo Alto Networks (Deprecated)

Details

ID	`ExpansePrintSuggestions`
Language	python
From Version	6.0.0
Docker Image	`demisto/python3:3.10.13.83255`

README

Generates and prints a report in markdown format containing useful suggestions for the Analyst to attribute an Expanse Issue to an owner.

Script Data

Name	Description
Script Type	python3
Tags
Cortex XSOAR Version	6.0.0

Inputs

Argument Name	Description
expanse_users	Formatted list of users connecting to the service.
expanse_devices	Formatted list of firewall devices with evidence of connections.
expanse_ips	Formatted list of public IPs connecting to the service.
prisma_cloud_assets	Formatted list of assets found in Prisma Cloud related to this service.
shadow_it	List of Shadow IT checks and results.
ip	IP Address of the service.
port	Port of the service.
fqdn	FQDN or Domain of the service.
region	Public Cloud region.
service	Public cloud service (i.e. EC2).
provider	Provider of the service.
expanse_issue_tags	List of Expanse tags associated to the issue.
expanse_asset_tags	List of Expanse tags associated to the asset.
expanse_business_units	List of Expanse Business Units.

Outputs

There are no outputs for this script.

Source

ExpansePrintSuggestions.py ExpansePrintSuggestions_test.py ExpansePrintSuggestions.yml

Download History Raw

args:
- description: Formatted list of users connecting to the service.
  isArray: true
  name: expanse_users
- description: Formatted list of firewall devices with evidence of connections.
  isArray: true
  name: expanse_devices
- description: Formatted list of public IPs connecting to the service.
  isArray: true
  name: expanse_ips
- isArray: true
  name: prisma_cloud_assets
  description: Formatted list of assets found in Prisma Cloud related to this service.
- description: List of Shadow IT checks and results.
  isArray: true
  name: shadow_it
- description: IP Address of the service.
  name: ip
  required: true
- description: Port of the service.
  name: port
  required: true
- description: FQDN or Domain of the service.
  name: fqdn
- description: Public Cloud region.
  name: region
- description: Public cloud service (i.e. EC2).
  name: service
- description: Provider of the service.
  name: provider
- description: List of Expanse tags associated to the issue.
  isArray: true
  name: expanse_issue_tags
- description: List of Expanse tags associated to the asset.
  isArray: true
  name: expanse_asset_tags
- description: List of Expanse Business Units.
  isArray: true
  name: expanse_business_units
comment: Deprecated. No available replacement. >
  Generates and prints a report in markdown format containing useful suggestions for the Analyst to attribute an Expanse Issue to an owner.
deprecated: true
commonfields:
  id: ExpansePrintSuggestions
  version: -1
dockerimage: demisto/python3:3.10.13.83255
enabled: true
name: ExpansePrintSuggestions
runas: DBotWeakRole
script: ''
scripttarget: 0
subtype: python3
tags: []
type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)