The EBL (External Block List) capabilities of the Palo Alto Networks firewalls are powerful and allow for the use of external data sources which have been manipulated into a common format for ingesting into the firewalls.
More information one how to configure EBL's can be found Here
This script will ingest data from the Microsoft published XML data for the IPv4 and IPv6 addresses as well as the URL's for Office 365 cloud services.
It will output data lists from each product and type (IPv4, IPv6, URL) into an individual list which can then be addressed in the EBL configuration on the firewall.
An example of the output can be found in the ebl-out directory in this repository.
This script will ingest data from the Zeus Tracker site and filter the data for presentation as an EBL. While this is pure list data, this script can be altered to include any additional checks that are needed for data verification.
This script will ingest data from the OpenPhish site and reformat for presentation as an EBL