An XSOAR engineer has been tasked with exporting all indicators from the production environment in the last 90 days. The final report needs to be in CSV format containing all indicator fields. How can this task be achieved?
An XSOAR engineer has been tasked with exporting all indicators from the production environment in the last 90 days. The final report needs to be in CSV format containing all indicator fields. How can this task be achieved?
To export all indicators from the production environment in the last 90 days in CSV format, navigate to the Threat Intel page, use the query firstSeen:>="90 days ago", select All columns in Table View, and choose the Export option to export as a CSV. This method allows you to include all indicator fields in the specified timeframe.
https://docs-cortex.paloaltonetworks.com/r/Cortex-XSOAR/6.12/Cortex-XSOAR-Administrator-Guide/Export-Indicators