Manually Export Indicators - Threat Intel Management Guide - 6.5 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Threat Intel Management Guide

Product
Cortex XSOAR
Version
6.5
Creation date
2022-09-29
Last date published
2023-12-12
End_of_Life
EoL
Category
Threat Intel Management Guide

You can select one or more indicators from the Indicators table and export them as a CSV file or STIX file. The file can then be sent to or pulled by a SIEM or firewall, or can be used as the input for a playbook that processes indicators.

  1. Go to the Threat Intel (Indicators) page.

  2. Select the checkbox for one or more indicators that you want to export to a file.

  3. Export the selected indicators.

    • (Optional) Click the Export button to export the indicators to a CSV file.

    • (Optional) Click the Export (STIX) button to export the indicators to a STIX file.

    By default, the CSV file is generated in UTF8 format. You can change this to the UTF8-BOM format.