Manually Export Indicators - Administrator Guide - 6.6 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.6
Creation date
2022-09-29
Last date published
2024-07-30
End_of_Life
EoL
Category
Administrator Guide
Abstract

You can manually export indicators to a file directly from the Indicators page in Cortex XSOAR.

You can select one or more indicators from the Indicators table and export them as a CSV file or STIX file. The file can then be sent to or pulled by a SIEM or firewall, or can be used as the input for a playbook that processes indicators.

  1. Go to the Threat Intel (Indicators) page.

  2. Select the checkbox for one or more indicators that you want to export to a file.

  3. Export the selected indicators.

    • (Optional) Click the Export button to export the indicators to a CSV file.

    • (Optional) Click the Export (STIX) button to export the indicators to a STIX file.

    By default, the CSV file is generated in UTF8 format. You can change this to the UTF8-BOM format.Export an Indicator to CSV Using the UTF8-BOM Format