Manually Export Indicators - Administrator Guide - Cortex XSIAM - Cortex - Security Operations

Cortex XSIAM Administrator Guide

Product
Cortex XSIAM
Creation date
2024-07-16
Last date published
2024-10-14
Category
Administrator Guide
Abstract

Manually export indicators to a file directly as a CVS or STIX file.

You can select one or more indicators from the Indicators table and export them as a CSV file or STIX file. The file can then be sent to or pulled by a SIEM or firewall or can be used as the input for a playbook that processes indicators.

  1. Go to the Indicators page.

  2. Select the check box for one or more indicators that you want to export to a file.

  3. Export the selected indicators.

    • (Optional) Click the Export button to export the indicators to a CSV file.

    • (Optional) Click the Export (STIX) button to export the indicators to a STIX file.

    The CSV file is generated in UTF8 format.