Cortex Xpanse Pack.#This Playbook is part of the
Supported Cortex XSOAR versions: 6.0.0 and later.
Subplaybook for bringing rogue cloud accounts under management.
This playbook uses the following sub-playbooks, integrations, and scripts.
- This does not use any sub-playbooks
- This playbook does not use any scripts.
|ExpanseCloudManagedIssueId||ID of Expanse Issue||incident.expanseissueid||Optional|
|ExpanseCloudManagedIPv4||IPv4 of Cloud asset||incident.labels.ip||Optional|
|ExpanseCloudManagedEmailBody||Email body to send to potential owner||Infosec has identified a security issue on a cloud service we believe may belong to you or your team. This asset or service does not appear to be behind proper compliance controls. \n\nPlease get in touch with your Infosec team to define proper remediation access.||Optional|
There are no outputs for this playbook.