Script for detecting the WireLurker malware family
411 ★
Main MineMeld documentation repo
311 ★
Ansible modules for Palo Alto Networks NGFWs
194 ★
The PAN-OS SDK for Python is a package to help interact with Palo Alto Networks devices (including physical and virtualized Next-generation Firewalls and Panorama). The pan-os-python SDK is object oriented and mimics the traditional interaction with the device via the GUI or CLI/API.
171 ★
Engine of MineMeld
116 ★
IronSkillet is a set of day-one configuration templates for PAN-OS to enable alignment with security best practices. See the Quick Start section below to get started using the template configurations.
108 ★
This repo contains Terraform templates to deploy infrastructure on AWS and Azure and to secure them using the Palo Alto Networks Next Generation Firewalls
94 ★
VM-Series ARM Templates for Microsoft Azure
71 ★
Palo Alto Networks App for Splunk leverages the data visibility provided by Palo Alto Networks next-generation firewalls and endpoint security with Splunk's extensive investigation and visualization capabilities to deliver an advanced security reporting and analysis tool.
54 ★
Auto Scaling VM-Series firewalls in AWS
50 ★
Ansible playbook for installing MineMeld on Linux
43 ★
42 ★
VM-Series for Amazon Web Services
41 ★
Ansible collection for PAN-OS
39 ★
automated AWS transit vpc
37 ★
WebUI of MineMeld
Terraform Panos provider
33 ★
Prototypes for MineMeld nodes
31 ★
Evident Security Platform Custom Signatures Samples
29 ★
Python idiomatic SDK for Cortex™ Data Lake.
28 ★
pango is the underlying library for the Palo Alto Networks Terraform provider
Flexible Cloud Automation
26 ★
Panhandler is a tool to manage config snippets and Skillets for PAN-OS devices
Creates a Transit Gateway with two server VPCs and a security VPC
24 ★
A command line utility to aid in using autofocus for IR and research
23 ★
Parse a report and import the events into MISP
Scale out security for web deployments using VM-Series firewalls and Azure Application Gateway web load balancer
22 ★
Evident Security Platform Automation
18 ★
Aporeto API (Elemental model)
pan-stix
Palo Alto Networks Reference Architectures
17 ★
MineMeld nodes for MISP
A python client library for interfacing with the autofocus rest services
Azure security with VM-Series in a hub-and-spoke architecture
16 ★
VM-Series Firewalls on OpenStack
15 ★
The Palo Alto Networks Add-on for Splunk allows a Splunk® Enterprise or Splunk Cloud administrator to collect data from Palo Alto Networks Next-Generation Firewall devices and Advanced Endpoint Protection.
Repository for Palo Alto Networks Kubernetes Security - CN Series.
13 ★
A collection of pre-installed tools commonly used with Palo Alto Networks products packaged as a Docker container
Terraform provider for Prisma Cloud
12 ★
Read only mirror. To contribute or submit issues, please go to the website link --->
Script for pulling events from a MISP database and converting them to Autofocus queries.
Sample playbooks for the Palo Alto Networks Ansible modules.
10 ★
AWS ALB Sandwich with VM-Series
VM-Series templates for Google Cloud Platform
Official Palo Alto Networks MineMeld docker
8 ★
Introduction to Terraform and Ansible
Next Generation Firewall AWS Lab
Sample data generator for the Splunk for Palo Alto Networks app.
7 ★
PAN-OS Bootstrapper UI provides a simple, example web-UI that consumes the PAN-OS Bootstrapper utility API.
Cisco ISE session miner using pxGrid bulk download REST API
MineMeld Miner for Youtube channels
This repo is for deploying CN-series firewall using Helm Package Manager for Kubernetes
6 ★
This repo contains a lab which demonstrates the use of the Palo Alto Networks Security adapter for Istio
Multi-Cloud Security Automation Lab
Dynamic User Group code for Palo Alto Networks devices
A Utility to bootstrap a new PAN-OS NGFW. This utility provides an API only. An example web interface is provided here: https://github.com/PaloAltoNetworks/panos-bootstrapper-ui
A collection of utilities that users of pan-python might find useful
5 ★
Implements the automation and integration framework to work with Azure Virtual WAN's and PANW to create VPN connections.
Azure autoscaling solution using VMSS
Azure VM-Series options including differing interfaces
Intel Importer
PCS Policies Release Notice
4 ★
Terraform, Ansible, and Python scripts that implement Palo Alto Networks Reference Architectures through automation.
Infrastructure as Code lab using Terraform and GCP
Prisma Cloud serverless function that can accept webhook and send alerts to syslog, S3, and SQS
Simple 2-zone internet gateway configuration for home use
MineMeld nodes for Microsoft Graph Security API
Cisco ISE pxGrid to Palo Alto Networks MineMeld Gateway
Sample Terraform template for deploying VM-Series on Oracle Cloud Infrastructure
Palo Alto Networks Application Framework NodeJS SDK
repo for ignite 2018 hand on lab
This solution maps XFF header source IP to User-ID allowing for blocking malicious sources when the VM-Series is behind a device that performs source NAT such as a load balancer.
New TAXII Miner for MineMeld
Repo created to support the deployment of a 4 interface Palo Alto Networks firewall (1-MGMT and 3-Dataplane) into an existing Microsoft Azure environment.
A set of Terraform plans for deploying a Kubernetes cluster protected by a CN-Series containerize firewall
3 ★
Detect and respond to attacks in AWS by sending packets to VM-Series without putting the firewall inline
Cloudformation Script to onboard accounts to Redlock
GlobalProtect Quick Configs
This repository contains the various integrations of the Palo Alto Networks Security adapter for Istio
Skillets is the default holding place for useful Panhandler skillets. These are usually smaller one-off bits that may not require their own repository. Feel free to add to this repository with your own Skillets via a PR.
Terraform Module to Deploy PAN-OS firewall to AWS
Palo Alto Networks Device Framework Jupyter Notebook Tutorial
Repo created to support the deployment of a 3 interface Palo Alto Networks firewall (1-MGMT and 2-Dataplane) into an existing Microsoft Azure environment.
Issue tracking for the Palo Alto Networks Cisco ACI Device Package
a collection of scripts that make PaloAltoNetworks test drive
Very targeted script that allows update of the FW NAT rules based on the dynamic AWS' ELB VIP changes
A hands-on lab showing how to use the PAN-OS Ansible modules.
2 ★
VM-Series Advanced Deployment for GCP Qwiklab
Prisma Cloud alert csv output plus tags and account group names
Tools and base classes for working with Skillets
Google Cloud Auto Scaling Available Now
PAN-OS® for Developers site
A group of custom vulnerability signatures from various authors.
Repo for ignite how lab
Docs and tutorial for Skillet template building
This Azure HA Template Allows Launching an Additional VM-Series into a Resource Group.
MSSP Demo Portal - Art of the Possible
CNC: Chevy's, not Cadillacs. Rapid UI prototyping for all Palo Alto Networks WWSE demos and pocs.
Deploys the VM-Series in Azure into an Availability Zone
Application Frameworks OAUTH2 Shared Component implementation as a AWS Lambda Function
This is the V1 (CFT) template to deploy an NLB architecture to AWS.
firebreak: Fight fire with WildFire
1 ★
SD-WAN configuration templates
IaC demo using Terraform Cloud
For use with AWS HA Improvements
test
Create custom auto-remediation solutions using serverless functions in the cloud.
Create custom VM-Series images on public cloud with upgraded PanOS, Plugin and Content versions
Integration of IOC from AWS Security Hub with the VM-Series Firewall
Prisma Cloud SDK in Go
What can a potential attacker know about you without being alerted to their recon? Assassin can help you find out.
Suite of skillets for initial Prisma Access deployment and configuration
This Terraform Module creates a PAN-OS bootstrap package in an AWS S3 bucket to be used for bootstrapping Palo Alto Networks VM-Series virtual firewall instances.
Signatures for Palo Alto Networks to detect improperly hardened servers
A PassportJS strategy for Palo Alto Networks Cortex
Miner for Prisma Access API
Default community health files for all Palo Alto Networks public repositories
The K-12 Skillet is indented for K-12 educational deployment configuration of the Palo Alto Networks NGFW
Reports and tools for performing various assessments
This Ansible role applies security best practice templates to Palo Alto Networks devices.
A collection of Example Skillets including terraform, REST, python, and PAN-OS skillets
Deploys k8s cluster, VM-Series for N/S and E/W inspection and guides the use of the Prisma Cloud API scan of Manifest
This implementation integrates the AWS Security Hub insights and makes it actionable on the VM-Series FW.
MineMeld nodes for MSFT WD ATP API
This repo contains Terraform templates to deploy a PAN VM-Series FW into GCP.
This repo enables you to perform cloud automation demos using Terraform or Ansible
MineMeld Miner extension to expand IPv4 wildcards into list of corresponding CDIR's
Update Azure NSG to quarantine hosts based upon trigger from FW threat log
Azure China solution template
MineMeld Output node for CEF format
0 ★
set of configuration, validation, and scripts for IoT deployment and traffic generation
Suite of helper skillets and playbooks to simplify and validate Cortex Data Lake deployments
Auto Launch templates for Azure HA
Terraform PrismaCloud provider
Ansible collection for Skillets
CN-Series Qwiklab
VM-Series AutoScale Qwiklab
Resources for World Wide Public Sector customers
Ansible collection for Prisma Cloud
Source for the documentation of the Splunk App and Add-on
NodeJS / Javascript / TypeScript language binding for the XDR PRO API
A docker image to reload Splunk apps on changes during Splunk app development
Palo Alto Networks Cortex hub client library
Palo Alto Networks Cortex Data Lake client library
Creates a PAN-OS bootstrap package in Microsoft Azure.
This Terraform Module creates a PAN-OS bootstrap package in a Google Cloud Storage bucket.
Ansible roles and libraries for working with PAN-OS, Panorama, and Pan-Validation Skillets
files used for HOW Lab Prisma Cloud Compute: Securing GKE Run Time
testing traffic
This repository contains squid proxy patch to make it work with the decryption broker feature. This repo also has a brief documentation about how to make squid proxy work with decryption broker feature in order to send traffic to an ICAP server for inspection.
Cortex® for Developers
Palo Alto Networks for Developers
Code for Black Hat Projects
Onboarding and configuration skillets for GPCS
Azure Kubernetes Service Security Solution
Script for exporting RedLock policies and their associated RQL into a CSV output file.
This repo contains the configuration files to build and deploy the Palo Alto Networks Istio adapter into the GCP/Kubernetes market place
Partner Security Guidelines for Cortex Apps
Mobile configuration templates to create logging for safenetworking
An Ansible role that synchronizes VMware vCenter virtual machine IP addresses and tags with PAN-OS.
repeatable jinja templates for mssp services
An Ansible role for deploying the Palo Alto Networks Traps agent
Source code for using Autofocus (and other applications) to discern hash coverage of known and unknown artifacts.
Multi-Cloud Automation HOW
FQDN Serverless Service
Sample template for deploying VM-Series for AzureStack
PAN Cloud Python SDK Tutorial
Packer and Ansible project to build an automation utility vm
MineMeld extension for ThreatConnect
Script to read learned Cisco APIC EPG Endpoints and update PANW dynamic address groups.
Update AWS SG to quarantine hosts based upon trigger from FW threat log Edit Add topics
Templates and such for VM-Series' PAN-OS 8.1 (aka Budapest) beta in public clouds (AWS, Azure, Google Cloud)
Networking Scripts
Upgrade all NSX-based VM-1000-HV firewalls to the same version
A proof of concept to demonstrate synchronization of server assets and their attributes from ServiceNow into registered IP tags and dynamic address groups on a Palo Alto Networks next-generation firewall.
demo demo