Exporting IOCs

Updated 4 days ago by Elvis Hovor

You can export lists of IOCs from the IOCs Panel in either of two ways:

  • From the IOC List View, based on the current filters
  • From the IOC Constellation View, based on an indicator tag selection.

You can also export IOCs when viewing a report.

The export option is limited to the most recent 10,000 IOCs.

Exporting from the IOC List

To export the currently displayed list of IOCs, click the Export button on the far right of the menu bar.

This creates and downloads a .csv file containing the following information:

  • IOC type
  • Value
  • Enclave ID
  • First seen timestamp
  • Last seen timestamp

Exporting from Constellation View

To export the data from an IOC you are viewing as a Constellation, click the download button in the top menu bar.

This creates and downloads a .csv file containing the IOC type and IOC value for that IOC.


How Did We Do?