FireEye Web API

brumleyscott added a new solution:

Quote

This WEB API connects to the McAfee TIE "Threat Intelligence Exchange" via the DXL bus and allows FireEye to send HTTP JSON POST for reputation updates. It includes a manual URL for setting or retrieving TIE reputations for other integrations. It was designed to be used in a scalable web tier via Docker Swarm or on a single server using Docker containers. Containerization also allows it to be used in a cloud environment such as AWS, Google, or Apache Mesos.

brumleyscott added a new version:

Quote

Much of this project has been focused on refactoring.

• Support for setting Web Token via FLASK_TOKEN environment variable
• Improved efficiency of DXL connections
• Fixed some DXL connection issues
• Updated Docker Container with Tag 0.2.0

brumleyscott added a new version:

Quote

• Fixes an issue with the FireEye token authentication.
• Adds additional testing for access denied due to authentication token