IOC Enterprise Search Script

Python 3 script to create Enterprise Searches in FireEye Endpoint Security (FES) based on an IOC or collection of IOCs, using the FES API. Supports all available Windows and macOS IOC terms.

Works with IOCs created using OpenIOC 1.1 Editor (v3.1.4 and above), including the Windows and macOS IOCs provided in the Endpoint Security Supplementary IOCs.