* [Blog](https://www2.paloaltonetworks.com/blog)
* [Security Operations](https://www2.paloaltonetworks.com/blog/security-operations/)
* [Partner Integrations](https://www2.paloaltonetworks.com/blog/security-operations/category/partner-integrations/)
* Alert Investigation and R...

# Alert Investigation and Response Just Got Easier with the Digital Shadows Threat Intelligence Pack Available Now via the Cortex XSOAR Marketplace

[](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fsecurity-operations%2Falert-investigation-and-response-just-got-easier-with-the-digital-shadows-threat-intelligence-pack-available-now-via-the-cortex-xsoar-marketplace%2F)  
[](https://twitter.com/share?text=Alert+Investigation+and+Response+Just+Got+Easier+with+the+Digital+Shadows+Threat+Intelligence+Pack+Available+Now+via+the+Cortex+XSOAR+Marketplace&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fsecurity-operations%2Falert-investigation-and-response-just-got-easier-with-the-digital-shadows-threat-intelligence-pack-available-now-via-the-cortex-xsoar-marketplace%2F)  
[](https://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fwww2.paloaltonetworks.com%2Fblog%2Fsecurity-operations%2Falert-investigation-and-response-just-got-easier-with-the-digital-shadows-threat-intelligence-pack-available-now-via-the-cortex-xsoar-marketplace%2F&title=Alert+Investigation+and+Response+Just+Got+Easier+with+the+Digital+Shadows+Threat+Intelligence+Pack+Available+Now+via+the+Cortex+XSOAR+Marketplace&summary=&source=)  
[](https://www.paloaltonetworks.com//www.reddit.com/submit?url=https://www2.paloaltonetworks.com/blog/security-operations/alert-investigation-and-response-just-got-easier-with-the-digital-shadows-threat-intelligence-pack-available-now-via-the-cortex-xsoar-marketplace/&ts=markdown)  
\[\](mailto:?subject=Alert Investigation and Response Just Got Easier with the Digital Shadows Threat Intelligence Pack Available Now via the Cortex XSOAR Marketplace)  
Link copied  
By [James Merrick](https://www.paloaltonetworks.com/blog/author/james-merrick/?ts=markdown "Posts by James Merrick")  
Mar 09, 2022  
3 minutes  
[Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown)  
[Cortex XSOAR Marketplace](https://www.paloaltonetworks.com/blog/tag/cortex-xsoar-marketplace/?ts=markdown)  
[Digital Shadows Searchlight](https://www.paloaltonetworks.com/blog/tag/digital-shadows-searchlight/?ts=markdown)  
[Enrich Your SOC](https://www.paloaltonetworks.com/blog/tag/enrich-your-soc/?ts=markdown)  
[Exposed Credentials](https://www.paloaltonetworks.com/blog/tag/exposed-credentials/?ts=markdown)  
[Impersonating Domains](https://www.paloaltonetworks.com/blog/tag/impersonating-domains/?ts=markdown)  
[MITRE ATT\&CK](https://www.paloaltonetworks.com/blog/tag/mitre-attck/?ts=markdown)  
[Security Automation](https://www.paloaltonetworks.com/blog/tag/security-automation/?ts=markdown)  
[security operations](https://www.paloaltonetworks.com/blog/tag/security-operations/?ts=markdown)  
[SOAR content](https://www.paloaltonetworks.com/blog/tag/soar-content/?ts=markdown)  
[SOAR playbooks](https://www.paloaltonetworks.com/blog/tag/soar-playbooks/?ts=markdown)  
[SOC](https://www.paloaltonetworks.com/blog/tag/soc/?ts=markdown)  
[Threat Intel](https://www.paloaltonetworks.com/blog/tag/threat-intel/?ts=markdown)  
[Threat Intelligence Playbooks](https://www.paloaltonetworks.com/blog/tag/threat-intelligence-playbooks/?ts=markdown)  
[Vulnerable Services](https://www.paloaltonetworks.com/blog/tag/vulnerable-services/?ts=markdown)

When it comes to responding to threats, a quick and informed response makes the difference between protecting your business and falling victim to a breach. Unfortunately, many security teams lack the automation required to speed response, forcing analysts to manually explore the alert. The biggest hindrance teams face in their quest for speedy response is the time needed for investigation.

Digital Shadows and Cortex XSOAR have partnered to help address this common challenge. We are excited to announce the availability of the Digital Shadows Searchlight content pack for threat intelligence and the premium pack for SearchLight Essentials within the Cortex XSOAR Marketplace. These new capabilities can be installed with the click of a button for existing Cortex XSOAR clients and allow users to rapidly contextualize threats with industry-leading intelligence from SearchLight. Cortex XSOAR users can also subscribe to SearchLight Private Offer, providing streamlined procurement and custom term lengths.

The SearchLight Essentials premium pack empowers teams to quickly access the most actionable and relevant threat intelligence for exposed credentials, impersonating domains, and vulnerable services. Armed with this intelligence, organizations are now able to protect their data, secure their brand, and efficiently enrich IOCs utilizing Cortex XSOAR playbooks.

## **Why is this so important to your organization and those responsible for remediating threats?**

In a fast-moving security landscape with limited resources, every moment is critical. SearchLight and Cortex XSOAR enable you to quickly respond to your online exposure and external threats. SearchLight can both identify new threats--like phishing domains--and enrich existing alerts raised from Cortex XSOAR's single pane of glass with indicators and valuable context. This provides a relevant and actionable approach to threat intelligence, allowing organizations to focus on the digital risks that they are most concerned about.

The new playbooks included in the SearchLight content pack were created hand-in-hand with our clients to meet their scaling and resourcing challenges. By automating threat intelligence processes, like IOC enrichment and prioritization, one large retail client with global operations was able to save 90 hours of manual effort per month prioritizing over 1,000 monthly alerts.

The SearchLight content pack enables your SOC to:

* Automate enrichment of observables to discover and leverage related intelligence.
* Respond quickly to alerts by triggering out of the box playbooks that enable remediation.
* Eliminate manual investigation and navigate with speed across your workloads and unstructured data, reducing the time it takes to enrich and respond to threats.
* Automatically attach associated MITRE techniques, indicators, and other summary information to the incident for easy review and remediation.

## **Learn More**

Build out your security program with the [SearchLight premium pack](https://xsoar.pan.dev/marketplace/details/DigitalShadows) or inquire about a private offer through the "Try Now" button in your XSOAR deployment. The Cortex XSOAR Marketplace houses [more than 850 prebuilt content packs](https://www.paloaltonetworks.com/cortex/xsoar-ecosystem) for your top security tools.

Discover how the pairing between SearchLight and Cortex XSOAR can elevate your security program with an expert led discussion on streamlined investigation and response. [Save your seat today!](https://urldefense.com/v3/__https://info.digitalshadows.com/streamlineresponsewiththreatintelandsoar-registration.html?source=PANW__;!!Mt_FR42WkD9csi9Y!LotXkQv8vcWSuFW02mBQW8aVwADzmUuEBnitXNpkKpmCqRiPS1VR5ULuvz-s-9TEah7BDL4$)

*** ** * ** ***

## Related Blogs

### [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown)

[#### Mitigate Risk and Increase Identity Awareness with Cortex XSOAR and SailPoint](https://www2.paloaltonetworks.com/blog/security-operations/sailpoint-xsoar-partnership/)

### [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown)

[#### Building a Cyber Immune Company Culture with Cortex XSOAR and SecurityAdvisor](https://www2.paloaltonetworks.com/blog/security-operations/security-advisor-xsoar/)

### [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown)

[#### Accelerate Detection and Response with Cortex XSOAR and LogPoint](https://www2.paloaltonetworks.com/blog/security-operations/accelerate-detection-and-response-with-cortex-xsoar-and-logpoint/)

### [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown)

[#### Protect Your Network from IoT Devices By Using Cortex XSOAR and Sepio Systems](https://www2.paloaltonetworks.com/blog/security-operations/security-operations-sepiosystems-xsoar/)

### [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown)

[#### Automate Gurucul Behavior Analytics Threat Detection and Response Workflows](https://www2.paloaltonetworks.com/blog/security-operations/automate-gurucul-behavior-analytics-threat-detection-and-response-workflows/)

### [Must-Read Articles](https://www.paloaltonetworks.com/blog/security-operations/category/must-read-articles/?ts=markdown), [Partner Integrations](https://www.paloaltonetworks.com/blog/security-operations/category/partner-integrations/?ts=markdown), [Use-Cases](https://www.paloaltonetworks.com/blog/security-operations/category/use-cases/?ts=markdown)

[#### Auto-Quarantine Phishing Threats with Cortex XSOAR and Cofense Vision](https://www2.paloaltonetworks.com/blog/security-operations/auto-quarantine-phishing-threats-with-cortex-xsoar-and-cofense-vision/)

### Subscribe to Security Operations Blogs!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.
![spinner](https://www2.paloaltonetworks.com/blog/wp-content/themes/panwblog2023/dist/images/ajax-loader.gif) Sign up  
Please enter a valid email.  
By submitting this form, you agree to our [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown) and acknowledge our [Privacy Statement](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown). Please look for a confirmation email from us. If you don't receive it in the next 10 minutes, please check your spam folder.  
This site is protected by reCAPTCHA and the Google [Privacy Policy](https://policies.google.com/privacy) and [Terms of Service](https://policies.google.com/terms) apply.  
{#footer} {#footer}

## Products and Services

* [AI-Powered Network Security Platform](https://www.paloaltonetworks.com/network-security?ts=markdown)

* [Secure AI by Design](https://www.paloaltonetworks.com/precision-ai-security/secure-ai-by-design?ts=markdown)

* [Prisma AIRS](https://www.paloaltonetworks.com/prisma/prisma-ai-runtime-security?ts=markdown)

* [AI Access Security](https://www.paloaltonetworks.com/sase/ai-access-security?ts=markdown)

* [Cloud Delivered Security Services](https://www.paloaltonetworks.com/network-security/security-subscriptions?ts=markdown)

* [Advanced Threat Prevention](https://www.paloaltonetworks.com/network-security/advanced-threat-prevention?ts=markdown)

* [Advanced URL Filtering](https://www.paloaltonetworks.com/network-security/advanced-url-filtering?ts=markdown)

* [Advanced WildFire](https://www.paloaltonetworks.com/network-security/advanced-wildfire?ts=markdown)

* [Advanced DNS Security](https://www.paloaltonetworks.com/network-security/advanced-dns-security?ts=markdown)

* [Enterprise Data Loss Prevention](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Enterprise IoT Security](https://www.paloaltonetworks.com/network-security/enterprise-device-security?ts=markdown)

* [Medical IoT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [Industrial OT Security](https://www.paloaltonetworks.com/network-security/medical-device-security?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [Next-Generation Firewalls](https://www.paloaltonetworks.com/network-security/next-generation-firewall?ts=markdown)

* [Hardware Firewalls](https://www.paloaltonetworks.com/network-security/hardware-firewall-innovations?ts=markdown)

* [Software Firewalls](https://www.paloaltonetworks.com/network-security/software-firewalls?ts=markdown)

* [Strata Cloud Manager](https://www.paloaltonetworks.com/network-security/strata-cloud-manager?ts=markdown)

* [SD-WAN for NGFW](https://www.paloaltonetworks.com/network-security/sd-wan-subscription?ts=markdown)

* [PAN-OS](https://www.paloaltonetworks.com/network-security/pan-os?ts=markdown)

* [Panorama](https://www.paloaltonetworks.com/network-security/panorama?ts=markdown)

* [Secure Access Service Edge](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Prisma SASE](https://www.paloaltonetworks.com/sase?ts=markdown)

* [Application Acceleration](https://www.paloaltonetworks.com/sase/app-acceleration?ts=markdown)

* [Autonomous Digital Experience Management](https://www.paloaltonetworks.com/sase/adem?ts=markdown)

* [Enterprise DLP](https://www.paloaltonetworks.com/sase/enterprise-data-loss-prevention?ts=markdown)

* [Prisma Access](https://www.paloaltonetworks.com/sase/access?ts=markdown)

* [Prisma Browser](https://www.paloaltonetworks.com/sase/prisma-browser?ts=markdown)

* [Prisma SD-WAN](https://www.paloaltonetworks.com/sase/sd-wan?ts=markdown)

* [Remote Browser Isolation](https://www.paloaltonetworks.com/sase/remote-browser-isolation?ts=markdown)

* [SaaS Security](https://www.paloaltonetworks.com/sase/saas-security?ts=markdown)

* [AI-Driven Security Operations Platform](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cloud Security](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Cortex Cloud](https://www.paloaltonetworks.com/cortex/cloud?ts=markdown)

* [Application Security](https://www.paloaltonetworks.com/cortex/cloud/application-security?ts=markdown)

* [Cloud Posture Security](https://www.paloaltonetworks.com/cortex/cloud/cloud-posture-security?ts=markdown)

* [Cloud Runtime Security](https://www.paloaltonetworks.com/cortex/cloud/runtime-security?ts=markdown)

* [Prisma Cloud](https://www.paloaltonetworks.com/prisma/cloud?ts=markdown)

* [AI-Driven SOC](https://www.paloaltonetworks.com/cortex?ts=markdown)

* [Cortex XSIAM](https://www.paloaltonetworks.com/cortex/cortex-xsiam?ts=markdown)

* [Cortex XDR](https://www.paloaltonetworks.com/cortex/cortex-xdr?ts=markdown)

* [Cortex XSOAR](https://www.paloaltonetworks.com/cortex/cortex-xsoar?ts=markdown)

* [Cortex Xpanse](https://www.paloaltonetworks.com/cortex/cortex-xpanse?ts=markdown)

* [Unit 42 Managed Detection \& Response](https://www.paloaltonetworks.com/cortex/managed-detection-and-response?ts=markdown)

* [Managed XSIAM](https://www.paloaltonetworks.com/cortex/managed-xsiam?ts=markdown)

* [Threat Intel and Incident Response Services](https://www.paloaltonetworks.com/unit42?ts=markdown)

* [Proactive Assessments](https://www.paloaltonetworks.com/unit42/assess?ts=markdown)

* [Incident Response](https://www.paloaltonetworks.com/unit42/respond?ts=markdown)

* [Transform Your Security Strategy](https://www.paloaltonetworks.com/unit42/transform?ts=markdown)

* [Discover Threat Intelligence](https://www.paloaltonetworks.com/unit42/threat-intelligence-partners?ts=markdown)

## Company

* [About Us](https://www.paloaltonetworks.com/about-us?ts=markdown)
* [Careers](https://jobs.paloaltonetworks.com/en/)
* [Contact Us](https://www.paloaltonetworks.com/company/contact-sales?ts=markdown)
* [Corporate Responsibility](https://www.paloaltonetworks.com/about-us/corporate-responsibility?ts=markdown)
* [Customers](https://www.paloaltonetworks.com/customers?ts=markdown)
* [Investor Relations](https://investors.paloaltonetworks.com/)
* [Location](https://www.paloaltonetworks.com/about-us/locations?ts=markdown)
* [Newsroom](https://www.paloaltonetworks.com/company/newsroom?ts=markdown)

## Popular Links

* [Blog](https://www.paloaltonetworks.com/blog/?ts=markdown)
* [Communities](https://www.paloaltonetworks.com/communities?ts=markdown)
* [Content Library](https://www.paloaltonetworks.com/resources?ts=markdown)
* [Cyberpedia](https://www.paloaltonetworks.com/cyberpedia?ts=markdown)
* [Event Center](https://events.paloaltonetworks.com/)
* [Manage Email Preferences](https://start.paloaltonetworks.com/preference-center)
* [Products A-Z](https://www.paloaltonetworks.com/products/products-a-z?ts=markdown)
* [Product Certifications](https://www.paloaltonetworks.com/legal-notices/trust-center/compliance?ts=markdown)
* [Report a Vulnerability](https://www.paloaltonetworks.com/security-disclosure?ts=markdown)
* [Sitemap](https://www.paloaltonetworks.com/sitemap?ts=markdown)
* [Tech Docs](https://docs.paloaltonetworks.com/)
* [Unit 42](https://unit42.paloaltonetworks.com/)
* [Do Not Sell or Share My Personal Information](https://panwedd.exterro.net/portal/dsar.htm?target=panwedd)
  ![PAN logo](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/pan-logo-dark.svg)
* [Privacy](https://www.paloaltonetworks.com/legal-notices/privacy?ts=markdown)
* [Trust Center](https://www.paloaltonetworks.com/legal-notices/trust-center?ts=markdown)
* [Terms of Use](https://www.paloaltonetworks.com/legal-notices/terms-of-use?ts=markdown)
* [Documents](https://www.paloaltonetworks.com/legal?ts=markdown)

Copyright © 2026 Palo Alto Networks. All Rights Reserved

* [![Youtube](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/youtube-black.svg)](https://www.youtube.com/user/paloaltonetworks)
* [![Podcast](https://www.paloaltonetworks.com/content/dam/pan/en_US/images/icons/podcast.svg)](https://www.paloaltonetworks.com/podcasts/threat-vector?ts=markdown)
* [![Facebook](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/facebook-black.svg)](https://www.facebook.com/PaloAltoNetworks/)
* [![LinkedIn](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/linkedin-black.svg)](https://www.linkedin.com/company/palo-alto-networks)
* [![Twitter](https://www.paloaltonetworks.com/etc/clientlibs/clean/imgs/social/twitter-x-black.svg)](https://twitter.com/PaloAltoNtwks)
* EN  
  Select your language