You can select one or more indicators from the Indicators table and export them as a CSV file or STIX file. The file can then be sent to or pulled by a SIEM or firewall, or can be used as the input for a playbook that processes indicators.
Go to the Threat Intel (Indicators) page.
Select the checkbox for one or more indicators that you want to export to a file.
Export the selected indicators.
(Optional) Click the Export button to export the indicators to a CSV file.
(Optional) Click the Export (STIX) button to export the indicators to a STIX file.
By default, the CSV file is generated in UTF8 format. You can change this to the UTF8-BOM format.