Visualize XSOAR content bundles as intuitive, interactive graphs.
XSOAR Visualizer converts exported Cortex XSOAR content bundles into insightful graphs for navigating a specific use case. The tool uses the incident type as a starting point and lists the associated layout, playbook, and post-processing for that type. It then analyzes the attached playbook, scanning the content bundle for referenced custom scripts and sub-playbooks to generate a comprehensive graphical representation.
The last time I opened yet another XSOAR environment, I was greeted by chaos: playbooks nested inside playbooks, ten levels deep—plunging straight to the ocean floor. A single modification to a custom script was enough to send entire chains of playbooks into error states, collapsing the automation like a house of cards.
git clone git@github.com:mandarnaik016/XSOAR-Visualizer.git- Extract the contents of
content-bundle-*.tar.gzto folder ContentBundle. - Run
python main.py. - Enter incident type name.
- Load the generated
outputs.jsonin jsoncrack.
- Add custom file path of content bundle as input.
- Add custom incident fields used within layout to graphs.
👤 Mandar Naik
- Website: https://mandarnaik016.github.io/
- Twitter: @_md_naik
- Github: mandarnaik016
- LinkedIn: mandarnaik016
Contributions, issues and feature requests are welcome!
Feel free to check issues page.
Give a ⭐️ if this project helped you!
Copyright © 2026 Mandar Naik.
This project is GPL v3 licensed.