Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint security with Splunk's extensive investigation and visualization capabilities to deliver an advanced security reporting and analysis tool.

A python-based API client for Cortex XDR API.

Script to remove the Cortex XDR agent through a common way and using the agent cleaner tool.

XQL query generator, for generating quick Hunting queries. Cortex XDR focussed. A github pages project.

Rapid7 InsightVM Postgres Reporting built in Python and PostgreSQL Rapid7 InsightVM API tools using Python PaloAlto Cortex XDR API

Automated threat intelligence collector built with Python and GitHub Actions — fetches recent IOCs from open sources, normalizes and enriches them (IP, URL, hash, CVE), and publishes ready-to-use feeds in CSV, JSON, and STIX formats.