Claude Code skill for Cortex XSOAR content pack development lifecycle
-
Updated
Mar 17, 2026
#
Cortex XSOAR
Cortex XSOAR is a Security Automation platform sold by Palo Alto Networks enabling Security Operations teams to develop low-code playbooks to (semi-)automatically conduct the response to security alerts/incidents.
The SOAR in XSOAR stands for “Security Orchestration, Automation and Response”.
XSOAR provides all kinds of open source community managed integrations for platforms/services commonly used by Security Operations teams.
Before being bought by PAN, XSOAR was a fully open sourced project known as Demisto.
Here are 19 public repositories matching this topic...
Repository to store xsoar course (Cortex XSOAR - Security Orchestration and Automation Course) free materials. You can purchase the course at https://www.udemy.com/course/xsoar-security-orchestration-and-automation-course/?referralCode=8F469AAD51A79BAA5950&couponCode=HAPPYAUTOMATING50
-
Updated
Oct 3, 2025 - HTML
X-n8 (Exnate) is an Agentic SOC Playbook collection bridging n8n’s AI agility with Palo Alto XSOAR’s orchestration. Covering 250+ use cases from Cloud to IAM it uses AI Agents for dynamic SIEM alert analysis and automated remediation. Aligning with MITRE ATT&CK, X-n8 transforms manual workflows into a scalable, autonomous defense ecosystem.
-
Updated
Jan 18, 2026 - Shell
Integration between Demisto/XSOAR and Claroty xDome
-
Updated
Jun 23, 2023 - Python
🚀 Build seamless integrations with Palo Alto Networks Cortex XSOAR 8.x using this native Go API client for efficient incident management and error handling.
-
Updated
Oct 13, 2026 - Go
Demisto is now Cortex XSOAR. Automate and orchestrate your Security Operations with Cortex XSOAR's ever-growing Content Repository. Pull Requests are always welcome and highly appreciated!
-
Updated
Jun 22, 2026 - Python
AI-Enhanced Cybersecurity Threat Detector — Single-machine Docker SOC pipeline with Splunk, Microsoft Sentinel, Defender for Endpoint, XSOAR, and Claude API
python docker machine-learning splunk cybersecurity soc threat-detection xsoar microsoft-sentinel claude-ai
-
Updated
Jun 15, 2026
Manifest V3 browser extension for preparing incident-response drafts from Cortex XSOAR.
-
Updated
Oct 1, 2026 - JavaScript
Cortex XSIAM / XSOAR 8 toolkit: reviewable correlation rule provisioning, alert profiling, ASM posture reports, and screenshot-safe LLM-assisted XQL
-
Updated
Sep 27, 2026 - Python
Native Go API client for Palo Alto Networks Cortex XSOAR 8.x / XSIAM
go golang security api-client siem cortex paloaltonetworks soar palo-alto-networks palo-alto xsoar xsiam cortex-xsoar
-
Updated
Mar 4, 2026 - Go
The Palo Alto Networks Cortex XSOAR 8 SaaS Ansible Collection provides modules and plugins to automate configuration and operational tasks on the Cortex XSOAR 8 SaaS platform using the REST API.
-
Updated
Oct 14, 2026 - Python
-
Updated
Jan 22, 2026 - Python
Store Claude Code memory in files for persistent context across sessions, projects, and devices without a database or cloud
python markdown productivity automation mcp recommendation-engine security-automation ai-agents soar xsoar ai-workspace anthropic context-management ai-memory enterprise-platforms claude-code claude-skills claude-plugin ai-development-frameworks
-
Updated
Oct 14, 2026 - Shell
Cortex XSIAM & XSOAR Content Pack for V-Key V-OS Threat Intelligence RASP Telemetry
-
Updated
Sep 23, 2026 - Python
Simple Integration for the free InternetDB-API
-
Updated
Jun 6, 2024 - Python
The repo contains a few scripts which might be helpful to batch-update records in Cortex XSOAR.
-
Updated
Jul 19, 2025 - Python
- Followers
- 1 follower
- Organization
- demisto
- Website
- github.com/topics/xsoar