FireEyeAPI

Google Data Studio Connector for FireEye Endpoint Security

Table of Contents

1. About The Project
   • Built With
2. Getting Started
   • Prerequisites
   • Installation
     • On the command line
     • On Google Scripts
3. Resources

About The Project

fireeyeAPI is the source code for a Google Apps Code-built Google Data Studio Connector. It is used for connecting FireEye Endpoint Security to Google Data Studio for the creation of dynamically updated customized graphical dashboards.

An example report that you could make using the data from this project.

Built With

• TypeScript
• node.js
• Google's clasp

Getting Started

Prerequisites

• node.js
• Valid FireEye Endpoint Security license
• Installed FireEye Endpoint Security Modules
  • Host Management
  • API Documentation
• User account with API access role (api_analyst or api_admin)
• Your Endpoint Security Server Base URL
  • Available in the FireEye Endpoint Security web console under
    Modules -> API Documentation
    • It should look like: https://<endpoint security fqdn>
    • There should be no trailing /hx/api
• Google Account
• Google Scripts API enabled (https://script.google.com/home/usersettings)
• clasp

Installation

On the command line

1. Download and unzip the archive from this page, or fork the repo and clone it locally

git clone https://github.com/Starmism/fireeyeAPI.git

2. Install clasp

npm install -g @google/clasp

3. Login with clasp

clasp login

4. Navigate to the project directory
5. Create a project and select Standalone when prompted for type

clasp create --title "FireEye Endpoint Security Host Management Connector"

6. Push the code to Google App Scripts

clasp push

On Google Scripts

1. Switch to the Legacy Editor
2. Select Publish -> Deploy from Manifest
3. Click Install add-on
4. Expand Latest Version (Head)
5. Click the Data Studio URL it reveals
6. Input the FireEye Endpoint Security API URL you got from above as well as your api user's credentials and click Connect
7. Click Create Report
8. Make a beautiful report!

Resources

FireEye Developer Hub
Endpoint API Documentation (Login Required)