You can export lists of IOCs from the IOCs Panel in either of two ways:
- From the IOC List View, based on the current filters
- From the IOC Constellation View, based on an indicator tag selection.
You can also export IOCs when viewing a report.
Exporting from the IOC List
To export the currently displayed list of IOCs, click the Export button on the far right of the menu bar.
This creates and downloads a .csv file containing the following information:
- IOC type
- Enclave ID
- First seen timestamp
- Last seen timestamp
Exporting from Constellation View
To export the data from an IOC you are viewing as a Constellation, click the download button in the top menu bar.
This creates and downloads a .csv file containing the IOC type and IOC value for that IOC.