Manually Export Indicators

Manually export indicators from Cortex XSOAR 6.13 Threat Intel Management.

You can select one or more indicators from the Indicators table and export them as a CSV file or STIX file. The file can then be sent to or pulled by a SIEM or firewall, or can be used as the input for a playbook that processes indicators.

1. Go to the Threat Intel (Indicators) page.
2. Select the checkbox for one or more indicators that you want to export to a file.
3. Export the selected indicators.

   • (Optional) Click the Export button to export the indicators to a CSV file.
   • (Optional) Click the Export (STIX) button to export the indicators to a STIX file.

   By default, the CSV file is generated in UTF8 format. You can change this to the UTF8-BOM format.