Skip to main content


This Script is part of the Cortex Xpanse by Palo Alto Networks Pack.#

Supported versions

Supported Cortex XSOAR versions: 6.0.0 and later.

Generates and prints a report in markdown format containing useful suggestions for the Analyst to attribute an Expanse Issue to an owner.

Script Data#

Script Typepython3
Cortex XSOAR Version6.0.0


Argument NameDescription
expanse_usersFormatted list of users connecting to the service.
expanse_devicesFormatted list of firewall devices with evidence of connections.
expanse_ipsFormatted list of public IPs connecting to the service.
prisma_cloud_assetsFormatted list of assets found in Prisma Cloud related to this service.
shadow_itList of Shadow IT checks and results.
ipIP Address of the service.
portPort of the service.
fqdnFQDN or Domain of the service.
regionPublic Cloud region.
servicePublic cloud service (i.e. EC2).
providerProvider of the service.
expanse_issue_tagsList of Expanse tags associated to the issue.
expanse_asset_tagsList of Expanse tags associated to the asset.
expanse_business_unitsList of Expanse Business Units.


There are no outputs for this script.