Query FireEye API for localized parsing. Basic pythonic implementation for querying the FireEye Intelligence api for mass data acquisition and localized parsing.

FireEye Intel APIv3

Python3.9 or newer
pandas-1.3.3
python-dotenv

pip3 install python-dotenv
pip3 install pandas

Add required variables to your .env file, in the same directory as FirePy.
The APP_NAME variable is used to identify Api activety by FireEye.

PUB=FireEyePublicKeyHere
PRIV=FireEyePrivateKeyHere
OUTPATH=/Path/To/Output/Here/
APP_NAME=OrganizationalNameHere

Execute the python file FirePy.py

python3 FirePy.py

Output will be directed to the path declared in your .env file, seperated by asset leveraged, and saved to a csv file with todays date as it's name.

50,000 queries per day, 1000 queries per second. Reference comments in the python file for individual endpoint limitations. All lengths are set to the maximum by default.

Requires: pyinstaller
Packages all dependencies and libraries into a single exe.

pip install pyinstaller
pyinstaller -F --paths=<your_path>\Lib\site-packages FirePy.py