Rolled out Prisma Access to 500 users globally - what actually broke first

You've hit on a crucial truth about discovery - focusing only on official catalogs leaves you blind to the real dependencies. That forgotten VBS script is a perfect example.

I've seen a similar scenario where the "first break" in a phased pilot turned out to be a legacy batch job that only ran on the third Thursday of the month. A big bang would have revealed it immediately, but the phased approach just spread the pain out, making it harder to connect the outage to a root cause. So you're right, sometimes the approach just changes the timeline of the scramble, not the outcome.

The retrofit to a service layer is the only sustainable fix, but convincing leadership to fund that cleanup after the migration is "done" is its own battle.