Manually Export Indicators - Threat Intel Management Guide - 6.11 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Threat Intel Management Guide

Product
Cortex XSOAR
Version
6.11
Creation date
2022-12-12
Last date published
2024-03-05
Category
Threat Intel Management Guide
Abstract

You can manually export indicators to a file directly from the Indicators page in Cortex XSOAR.

You can select one or more indicators from the Indicators table and export them as a CSV file or STIX file. The file can then be sent to or pulled by a SIEM or firewall, or can be used as the input for a playbook that processes indicators.

  1. Go to the Threat Intel (Indicators) page.

  2. Select the checkbox for one or more indicators that you want to export to a file.

  3. Export the selected indicators.

    • (Optional) Click the Export button to export the indicators to a CSV file.

    • (Optional) Click the Export (STIX) button to export the indicators to a STIX file.

    By default, the CSV file is generated in UTF8 format. You can change this to the UTF8-BOM format.