FireEye SO Content Bundle

This is the latest content collection for FireEye’s Security Orchestrator (SO), an open workflow automation platform that integrates FireEye and third‑party products. This content collection contains general availability (GA) plug-ins, early access (EA) plug-ins, their dependencies and plugin guides.

This package makes use of open source licensed software. Please see the package source for each license.

Install Plugins

1. Extract the ZIP file to a location on your workstation.
2. Go to the SO web UI and log on.
3. Click on Library in the navigation menu at the left of the screen.
4. Click on the Install button.
5. Drag and drop a file to the Install Package dialog or click on Choose File to select the file from the file system.
6. Click on the Install button in the dialog to complete the plugin installation.
7. Click Done.

Install Python Dependencies

1. Copy the files from your workstation to the SO system as user ixoperator using scp or similar utilities:

   scp -r fso_plugin_dependencies ixoperator@fso.local:.

2. Log in to the SO system using ssh or similar utility:

   ssh ixoperator@fso.local

3. Enable the virtual environment for plugin development:

   source /opt/fireeye/fso/config/iso_package_dev_env

4. Install the dependencies using the pip3 utility:

   pip3 install fso_plugin_dependencies/*

5. Restart the SO service using the following command:

   systemctl restart fso.service

Please review the SO System Administration guide located under Support to learn more.