Exporting Indicators
  • 08 Sep 2022
  • 1 Minute to read
  • Dark
    Light

Exporting Indicators

  • Dark
    Light

Minimum Role: Organization role of Read Only User

Prerequisites: Existing Indicators in your Organization

Overview

Indicators stored in ThreatConnect® can be exported into a comma-separated values (CSV) file format and downloaded to a local directory.

Note
The limit for the number of Indicators that can be exported at a given time is defined by your System Administrator. By default, this limit is 5,000. To reduce the number of Indicators displayed for export, use the FILTERS selector on the Browse screen.

Exporting Indicators

  1. On the top navigation bar, hover the cursor over Browse and select Indicators to display all Indicators, or select an Indicator type (Address in this example) to display all Indicators of that type (Figure 1). Graphical user interface, application  Description automatically generated

     

  2. Click the EXPORT button at the bottom of the Browse screen. The Export Data window will be displayed (Figure 2). Graphical user interface, application  Description automatically generated

     

    • CSV Format: Select the CSV format to be used for the exported file. The default selection is ThreatConnect.
    • Data: Each checkbox represents a piece of data that can be included in the CSV file. By default, all checkboxes are selected. Clear any checkboxes for data not to be included in the CSV file, if desired.
    • Click the EXPORT button. A file named ThreatConnectExport.csv will be downloaded to your computer’s default download location.

Exporting Associated Indicators

You can export sets of Indicators that have been associated to a Group or another Indicator via the Details screen of the primary Group or Indicator.

  1. Navigate to the Details screen for a Group or Indicator. For instructions on accessing an object’s Details screen, see the “Viewing the Details Screen” section of The Details Screen.
  2. Click the Associations tab. The Associations screen will be displayed with the INDICATORS option selected in the middle of the screen (Figure 3). Graphical user interface, application, Teams  Description automatically generated

     

  3. Select ThreatConnect CSV from the EXPORT menu at the lower-left corner of the screen. The Export Data window will be displayed (Figure 4). exporting-indicators-image-lsvoqhjn

     

    • Please select which fields to include in the export: Each checkbox represents a piece of data that can be included in the CSV file. By default, all checkboxes are selected. Clear any checkboxes for data not to be included in the CSV file, if desired.
    • Click the EXPORT button. A file named ThreatConnectExport.csv will be downloaded to your computer’s default download location.

ThreatConnect® is a registered trademark of ThreatConnect, Inc.
Excel® is a registered trademark of the Microsoft Corporation.

20005-01 v.10.C


Was this article helpful?