Export Indicators Integrations - Administrator Guide - 6.9 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
6.9
Creation date
2022-09-29
Last date published
2024-11-05
End_of_Life
EoL
Category
Administrator Guide
Abstract

There are several outbound-feed integrations that exports indicators to a file or list from Cortex XSOAR.

You can export indicators from Cortex XSOAR using the Generic Export Indicators Service integration. Exported indicators can be used for firewall block lists, allow lists, monitoring and analysis in Splunk, etc.

The Generic Export Indicators Service can be configured to export specific fields in different output formats. Multiple instances of the integration can be configured for different indicator queries, and the output can be customized to work with a variety of third party services.