xsiam

Outlines a scalable SOC optimization approach tailored for Palo Alto Networks Cortex XSIAM.

This is the official github repo for xql-hub.com

Standalone MCP server and MCP running on Cortex XSIAM, with optional Streamlit agent and Docker/compose tooling.

🚀 Build seamless integrations with Palo Alto Networks Cortex XSOAR 8.x using this native Go API client for efficient incident management and error handling.

CortexSim — detection quality-assurance engine for Palo Alto Networks Cortex. 177 UC/TC-aligned scenarios across 16 detection planes validating BIOC/XQL/Analytics/Correlation/IOC/ABIOC in XSIAM & XDR.

Redacted sample logs from Cortex XDR/XSIAM event forwarding to cloud storage — xdr_data (endpoint EDR) and cwp_packages_raw (Cloud Workload Protection) schema/format reference.

🛡️ National Defense Cloud & Autonomous XSIAM — Sigma Rule Engine, Automated BAS, and 30-Second SLA SOAR Containment

Cortex XSIAM / XSOAR 8 toolkit: reviewable correlation rule provisioning, alert profiling, ASM posture reports, and screenshot-safe LLM-assisted XQL

Native Go API client for Palo Alto Networks Cortex XSOAR 8.x / XSIAM

Ingest all Cisco Umbrella log types (DNS, SWG, CDFW, IPS, DLP, audit) into Cortex XSIAM directly from the Cisco-managed S3 bucket — no SQS, no self-managed bucket, no AWS account. Includes XDM data model rules and a full deployment guide.