You can export lists of Indicators from the IOCs Panel in either of two ways:
- From the IOC List View, based on the current filters
- From the IOC Constellation View, based on an indicator tag selection.
You can also export Indicators when viewing a report.
Exporting from List View
To export the currently displayed list of Indicators, click the Export button on the far right of the menu bar.
This creates and downloads a .csv file containing the following information:
- Indicator type
- Enclave ID
- First seen timestamp
- Last seen timestamp
Exporting from Graph View
To export the data from an Indicator you are viewing as a graph, click the download button in the top menu bar.
This creates and downloads a .csv file containing the type and value for that Indicator.