A high-performance Rust CLI monitoring tool for Cortex XSIAM, CLOUD and XDR, delivering real-time, interactive case tracking with advanced terminal-based visualisation and comprehensive filtering capabilities.
View project on GitHubMaintained by GoCortex, an independent publisher of open-source tooling for the Palo Alto Networks Cortex platform.
Terminal-based monitoring tool for Cortex XSIAM/CLOUD and XDR from GoCortex.io
A Rust CLI application providing real-time, interactive case tracking with an htop-style interface. XDRTop connects to the Cortex Platform Cases API to display security cases with filtering, drill-down issue details, and MITRE ATT&CK framework integration.
XDRTop enables security teams to monitor Cortex Platform cases directly from the terminal without browser access. It fetches all cases using intelligent pagination, caches results for performance, and provides keyboard-driven navigation for efficient case triage.
The site is independently operated and is in no way endorsed or supported by Palo Alto Networks.