Repository for Cortex XDR and Cortex XSIAM XQL queries and more!
☆49Jun 7, 2024Updated 2 years ago
Alternatives and similar repositories for cortex-xql-queries
Users that are interested in cortex-xql-queries are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Outlines a scalable SOC optimization approach tailored for Palo Alto Networks Cortex XSIAM.☆19Apr 8, 2026Updated 6 months ago
- ☆17Jul 11, 2026Updated 3 months ago
- A few XDR Scripts☆25Mar 19, 2025Updated last year
- Python3 API toolkit for Prisma Cloud APIs☆24Mar 7, 2025Updated last year
- A Rust-based Linux application that generates endpoint telemetry aligned with MITRE ATT&CK techniques for security analytics, research, a…☆12Jun 27, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Prisma Cloud utility scripts, and a Python SDK for Prisma Cloud APIs.☆66Nov 14, 2025Updated 11 months ago
- Helm Chart to deploy Twistlock Defender☆17Updated this week
- ☆14Updated this week
- A Cyber Security expert curated list of useful browser bookmarks☆13Aug 23, 2025Updated last year
- ☆10May 19, 2026Updated 5 months ago
- ☆16Jul 7, 2026Updated 3 months ago
- ☆10Feb 14, 2024Updated 2 years ago
- Thor Artifacts for Velociraptor☆19Dec 2, 2025Updated 11 months ago
- custom Python script to perform Yara matching in Cortex XDR☆14May 18, 2021Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Listing of YARA rules I wrote for Live and Retro hunts. Includes Jupyter infostealer, suspicious powershell, dll hijacking, vbs downloade…☆17Updated this week
- Detects and reports malicious clipboard content (PowerShell, mshta, etc.) on any page, with user alerts.☆16Oct 5, 2025Updated last year
- Menu for Thor scanner lite☆20Oct 24, 2025Updated last year
- ☆13Updated this week
- ☆12Aug 3, 2018Updated 8 years ago
- Autopsy NBM Plugins☆17Jul 9, 2023Updated 3 years ago
- MCP server that returns CVE details (descriptions, CWEs, CVSS) from the CVE.org API☆16Jun 4, 2025Updated last year
- Using Packer and Vagrant to build Windows images automatically☆31Jun 5, 2017Updated 9 years ago
- Postman collections for Prisma Cloud☆77Aug 13, 2024Updated 2 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Citrix CVE-2023-4966 from assetnote modified for parallel and file handling☆10Oct 25, 2023Updated 3 years ago
- The Prisma Cloud CLI is a command line interface for Prisma Cloud by Palo Alto Networks.☆43Apr 8, 2025Updated last year
- Operational Technology related Yara rules for the 2024 #100daysofYARA challenge. #OT #ICS #SCADA☆12Mar 15, 2026Updated 7 months ago
- Forensics artifacts collection☆21Jun 18, 2021Updated 5 years ago
- Some handy tools to do with audio locally.☆12Nov 28, 2024Updated last year
- An extendable tool to extract and aggregate IoCs from threat feeds☆33Feb 6, 2024Updated 2 years ago
- Case_Notes.py is a cross-platform (Windows, macOS, & Linux) python script to help make the documentation process easier.☆26Jun 24, 2023Updated 3 years ago
- A growing collection of tools around email idenfitication, creation, & verification☆11Oct 15, 2024Updated 2 years ago
- ☆27Feb 3, 2026Updated 9 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Cyber Defence related kusto queries for use in Azure Sentinel and Defender advanced hunting☆69Apr 1, 2026Updated 7 months ago
- Fluentd output plugin that sends events to Amazon Kinesis Streams and Amazon Kinesis Firehose.☆13Apr 2, 2023Updated 3 years ago
- ☆11Feb 9, 2016Updated 10 years ago
- Deploy an "illegal" SOC to manage vulnerabilities on your city servers in minutes.☆20Dec 8, 2022Updated 3 years ago
- PowerShell 'Hero': scripts for DFIR and automation with a PowerShell menu example.☆37Jul 11, 2023Updated 3 years ago
- A client to gather vulnerability-related information from the Fediverse.☆11Oct 27, 2026Updated last week
- GitHub landing page repo☆13May 14, 2026Updated 5 months ago