> ## Documentation Index
> Fetch the complete documentation index at: https://docs.threataware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# ESET

> Connect ThreatAware to ESET to monitor endpoint security and threat detection

## Overview

The ESET integration enables ThreatAware to collect data from your ESET deployment, providing visibility into endpoint security posture and threat detection status across your organisation.

<Info>
  **Connection Method**: API
  **Setup Time**: 15 minutes
  **Access Required**: ESET Administrator account
</Info>

## Data collected

The ESET integration provides:

* Endpoint security status
* Threat detection events
* Malware and detection logs
* Protection status across devices
* Compliance and policy status

## Use cases

<CardGroup cols={2}>
  <Card title="Endpoint Security Monitoring" icon="shield-halved">
    Track ESET protection status across all managed endpoints
  </Card>

  <Card title="Threat Detection" icon="triangle-exclamation">
    Monitor malware detections and security events
  </Card>

  <Card title="Compliance Validation" icon="clipboard-check">
    Verify endpoint protection is active on required systems
  </Card>

  <Card title="Incident Response" icon="fire">
    Correlate ESET threat data with device inventory for faster response
  </Card>
</CardGroup>

## Setup instructions

<Steps>
  <Step title="Log in to ThreatAware">
    Access the ThreatAware dashboard and navigate to **Settings** > **Systems**.
  </Step>

  <Step title="Find and Select ESET">
    Use the search bar to find **ESET** in the systems list and click **Connect**.

    A configuration dialog will appear.
  </Step>

  <Step title="Create an ESET Admin Account">
    We recommend creating a new ESET Admin account specifically for ThreatAware API integration.

    In your ESET management console:

    * Create a dedicated admin user (e.g., `threataware-api`)
    * Ensure the account has read permissions to endpoint data
    * Generate or note the password for this account
  </Step>

  <Step title="Copy Admin Account Credentials">
    From the ESET admin account you created, gather:

    * **Username**: The admin account username
    * **Password**: The admin account password

    <Warning>
      Ensure the admin account has the necessary read permissions but no write permissions for security.
    </Warning>
  </Step>

  <Step title="Enter Credentials in ThreatAware">
    In the ThreatAware connection dialog:

    * Paste the **Admin username** into the username field
    * Paste the **Admin password** into the password field
  </Step>

  <Step title="Authorize and Verify">
    Click the **Authorize** button to complete the connection.

    For detailed API permissions, refer to the [ESET API Documentation](https://www.eset.com/us/support/apidocs/).
  </Step>

  <Step title="Verify Connection Status">
    After authorization, verify the connection:

    * Check that ESET devices appear in your ThreatAware dashboard
    * Confirm all data from ESET is visible and up to date
    * Ensure the integration status shows **Active**
  </Step>
</Steps>

## Required credentials

<AccordionGroup>
  <Accordion title="Admin Username" icon="user">
    **Field Name**: ESET Admin Username
    **Type**: String
    **Description**: The username for the ESET admin account created for ThreatAware integration

    Example: `threataware-api` or `svc_threataware`
  </Accordion>

  <Accordion title="Admin Password" icon="lock">
    **Field Name**: ESET Admin Password
    **Type**: Password (encrypted)
    **Description**: The password for the ESET admin account

    <Tip>
      Store this credential securely. The admin account should have read-only permissions to endpoint data.
    </Tip>
  </Accordion>
</AccordionGroup>

## Verification and testing

After setup, verify the integration is working correctly:

1. **Check Device Listing**
   * Navigate to your ThreatAware device inventory
   * Verify ESET devices are listed and displayed
   * Confirm device counts match your ESET environment

2. **Verify Data Collection**
   * Check that ESET device details are visible
   * Confirm threat and protection status data is appearing
   * Look for recent update timestamps

3. **Test Queries**
   * Create a test query to filter devices by ESET protection status
   * Verify the data matches your expectations
   * Test filtering by threat or vulnerability data

## Troubleshooting

<AccordionGroup>
  <Accordion title="Incorrect Username or Password" icon="triangle-exclamation">
    **Symptoms**: Connection fails with authentication error

    **Solutions**:

    * Verify the **Admin username** is entered correctly without extra spaces
    * Confirm the **Admin password** is correct
    * Test the credentials by logging into ESET directly
    * Ensure the admin account is active and not locked
    * Check if the password has expired
  </Accordion>

  <Accordion title="Permission Errors" icon="ban">
    **Symptoms**: Connection succeeds but no data appears

    **Solutions**:

    * Verify the admin account has read permissions to endpoint data
    * Check that the account permissions include access to device inventory
    * Review the [ESET API Documentation](https://www.eset.com/us/support/apidocs/) for required permissions
    * Contact ESET support to verify account permissions
  </Accordion>

  <Accordion title="No Devices Appearing" icon="database">
    **Symptoms**: Connection is active but ESET devices don't show in inventory

    **Solutions**:

    * Verify there are devices in ESET with data to collect
    * Check the admin account can access all device groups in ESET
    * Wait up to 1 hour for initial data sync
    * Review ThreatAware integration logs for errors
    * Verify ESET is collecting data from managed endpoints
  </Accordion>

  <Accordion title="Connection Issues" icon="clock">
    **Symptoms**: Integration fails to connect or frequently disconnects

    **Solutions**:

    * Verify the ESET service is online and accessible
    * Check network connectivity between ThreatAware and ESET
    * Ensure firewall rules allow outbound access to ESET
    * Verify the admin account is not locked or expired
    * Contact ESET support if service issues persist
  </Accordion>
</AccordionGroup>

## Additional resources

<CardGroup cols={2}>
  <Card title="ESET API Documentation" icon="book" href="https://www.eset.com/us/support/apidocs/">
    Official ESET API documentation for detailed configuration and permissions
  </Card>

  <Card title="ThreatAware Support" icon="life-ring" href="mailto:help@threataware.com">
    Contact ThreatAware support for integration assistance
  </Card>
</CardGroup>

## Best practices

<Tip>
  **Credential Management**

  * Create a dedicated admin account specifically for ThreatAware
  * Store credentials securely in your organisation's password manager
  * Rotate credentials annually or per your security policy
  * Monitor for authentication failures in ThreatAware logs
</Tip>

<Tip>
  **Security Considerations**

  * Only grant read permissions to the API account
  * Limit the account scope to necessary device groups
  * Review ESET audit logs periodically to monitor API usage
  * Follow your organisation's least privilege principles
</Tip>