Manually Export Indicators - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide

Product
Cortex XSOAR
Version
8
Creation date
2024-09-18
Last date published
2024-11-28
Category
Administrator Guide
Solution
Cloud
Retire_Doc
Retiring
Link_to_new_Doc
/r/Cortex-XSOAR/8/Cortex-XSOAR-Cloud-Documentation
Abstract

You can manually export indicators to a file directly from the Indicators page in Cortex XSOAR.

You can select one or more indicators from the Indicators table and export them as a CSV file or STIX file. The file can then be sent to or pulled by a SIEM or firewall, or can be used as the input for a playbook that processes indicators.

  1. Go to the Threat Intel (Indicators) page.

  2. Select the checkbox for one or more indicators that you want to export to a file.

  3. Export the selected indicators.

    • (Optional) Click the Export button to export the indicators to a CSV file.

    • (Optional) Click the Export (STIX) button to export the indicators to a STIX file.

    By default, the CSV file is generated in UTF8 format. You can change this to UTF8-BOM format.