Export intelligence data

  • Freigeben Version: Australia
  • Aktualisiert 12. März 2026
  • 1 Minute Lesedauer

    • Use the export feature to manually export the intelligence data in various formats.

    Vorbereitungen

    Role required: sn_sec_tisc.analyst

    Warum und wann dieser Vorgang ausgeführt wird

    Currently, the export functionality is limited to observables, indicators, and case management. The following procedure describes how you can export the observables data, and follow the same procedure to export the indicators data.

    Prozedur

    1. Navigate to Workspaces > Threat Intelligence Security Center > Threat Intel Library > Observables > All Observables.
    2. Select any observable record.
    3. Select Export.
      Hinweis:
      The Export button is enabled only when observables are selected for export. If no observables are selected, the button remains disabled.
    4. Select the desired file type for export.
      • Currently, the supported export formats are Excel, CSV, and STIX 2.1 JSON. Suppose, if your export type is Excel then the number of records that can be exported at a time is limited to 10,000, regardless of the selected format type.
      • If the selection exceeds 10,000 records, then an error message displays indicating that the maximum limit for the selected format type has been surpassed, and only the first 10,000 records will be exported.
      • If the export format is CSV and the record limit is exceeded, an alert message is displayed indicating that the export is in progress state, along with a link to view the export status. You can click the link to view the status, and refresh the record. Once it moves to processed state you can download the attachment.
        Hinweis:
        When you export records in STIX 2.1 format Traffic Light Protocol (TLP) definitions applied to the intelligence object are included in the export as TLP 2.0 marking definition objects. For more information, see Define Marking Definition.
    5. Select Export.
      Hinweis:
      You can also view export data from the Imports/Exports module.
      A confirmation message indicating that the export is successful and your download is complete displays.