Skip to main content


This Script is part of the Common Scripts Pack.#

Checks if the supplied hostnames match either the organization's internal naming convention or the domain suffix.

Script Data#

Script Typepython3
Cortex XSOAR Version5.0.0

Used In#

This script is used in the following playbooks and scripts.

  • Indicator Hunting
  • Palo Alto Networks - Hunting And Threat Detection
  • Splunk Indicator Hunting


Argument NameDescription
hostNameA comma-separated list of hostnames to check.
internalRegexThe regex pattern for the organization's hostname for example \w\w\w\d$|\w\w\w$. for hosts that look like pcx1 or pcx.
domainNameThe domain name for the organization. For a single domain use this format: "". For multiple domains use this format: (|, where the pipe and the brackets are the OR condition for regex.


Endpoint.HostnameThe hostname.string
Endpoint.IsInternalWhether the supplied hostnames match the organization's naming convention. Can be "true" or "false".string