> ## Documentation Index
> Fetch the complete documentation index at: https://docs.threataware.com/llms.txt
> Use this file to discover all available pages before exploring further.

# FireFly

> ### Authorization/Setup Steps  1

## Overview

<Info>
  **Connection Method**: API
  **Access Required**: Administrator account
</Info>

### Authorization/setup steps

1. **Log in to FireEye Console**:
   * Access the [FireEye Console](https://portal.fireeye.com) using an account with administrator privileges.
2. **Create an API Key**:
   * Go to **Settings** > **API Access** within the FireEye console.
   * Click **Generate API Key** to create a key specifically for ThreatAware integration.
   * Set the permissions required, typically **Read-only** for monitoring, unless otherwise specified.
   * Copy the **API Key** and **API Secret** generated.
3. **Input API Credentials in ThreatAware**:
   * Open ThreatAware, go to **Integrations**, and select **FireEye**.
   * Enter the **API Key** and **API Secret** in the appropriate fields.

### Important notes and links

* Refer to the [FireEye API Documentation](https://docs.fireeye.com) for guidance on API permissions and configuration.
* Ensure the API key is securely stored and regularly reviewed for security compliance.

### Input details

* **API Key**: Key generated in FireEye for API access.
  ```text theme={null}
  Field: API Key
  Name: FireEye API Key
  Type: String
  ```
* **API Secret**: Secret associated with the FireEye API Key.
  ```text theme={null}
  Field: API Secret
  Name: FireEye API Secret
  Type: Password
  ```

### Verification and troubleshooting

* **Verification**: After saving the integration settings, verify that the **Integration Status** in ThreatAware shows as **Active**.
* **Troubleshooting**:
  * **Invalid Credentials**: Verify that the **API Key** and **API Secret** are correctly entered.
  * **Permission Denied**: Confirm that the API key permissions match the requirements for ThreatAware’s access in FireEye.

## Best practices

<Tip>
  **Credential Management**

  * Create a dedicated service account specifically for ThreatAware
  * Document credentials securely in your organisation's password manager
  * Monitor for authentication failures in ThreatAware regularly
</Tip>