Endpoint Security IOC Uploader

Python 3 script to upload real-time IOCs (eventItem IOCs) created using the IOC Editor (IOCe) to FireEye Endpoint Security (FES) controllers, using the FES API. Supports full OpenIOC syntax, including nested logic, case sensitivity, regex matching, etc.

The latest version now supports Linux IOCs in Endpoint Security 4.8.

Works with IOCs created using IOC Editor (IOCe) 3.1.4 or above, available here: https://fireeye.market/apps/211404