FireEye Web API 1.0.2

Allows FireEye to send HTTP JSON POST for reputation updates and also includes a manual URL for setting or retrieving TIE reputations for other integrations.

This WEB API connects to the McAfee TIE "Threat Intelligence Exchange" via the DXL bus and allows FireEye to send HTTP JSON POST for reputation updates. It includes a manual URL for setting or retrieving TIE reputations for other integrations. It was designed to be used in a scalable web tier via Docker Swarm or on a single server using Docker containers. Containerization also allows it to be used in a cloud environment such as AWS, Google, or Apache Mesos.

  • Version 1.0.2

    • 1.3k Downloads
    • Fixes an issue with the FireEye token authentication.
    • Adds additional testing for access denied due to authentication token

  • Version 1.0.1

    • 1k Downloads

    Much of this project has been focused on refactoring.

    • Support for setting Web Token via FLASK_TOKEN environment variable
    • Improved efficiency of DXL connections
    • Fixed some DXL connection issues
    • Updated Docker Container with Tag 0.2.0

  • Version 0.9.1

    • 909 Downloads

    This WEB API connects to the McAfee TIE "Threat Intelligence Exchange" via the McAfee DXL bus and allows FireEye to send HTTP JSON POST for reputation updates. It also includes a manual URL for setting or retrieving TIE reputations for other integrations.