Exporting Indicators

Overview

This article describes how to export a set of Indicators from the Browse screen into a comma-separated values (CSV) file. It also shows how to export a set of Indicators associated to a Group or to another Indicator from that object’s legacy Details screen into a CSV file.

Before You Start

User Roles

• To export Indicators from your Organization, your user account can have any Organization role. 
• To export Indicators from a Community or Source, your user account must have a Community role of Director, Editor, Contributor, Commenter, or User. 

Exporting Indicators  From the Browse Screen

Follow these steps to export data for a set of Indicators on the Browse screen to a CSV file:

1. Hover over Browse on the top navigation bar and select Indicators to display all Indicators, or select an Indicator type (Address in this example) to display all Indicators of that type (Figure 1).
   Hint

   You can view a more specific set of Groups by filtering the Browse screen, selecting or deselecting Group types from the Groups sidebar on the left, or changing the owners selected in My Intel Sources. 
   

    

2. Click EXPORT at the bottom left of the Browse screen. Fill out the fields on the Export Data window (Figure 2) as follows: 

    

   • CSV Format: Select the CSV format to be used for the exported file. 
   • Data: Select the checkbox for each data type to be included in the CSV file.
     Important: 

     The data types listed in the Data section are the only Indicator data fields that can be included in the CSV file.
3. Click EXPORT. A file named ThreatConnectExport.csv will be downloaded to your local drive.

Exporting Associated Indicators From the Legacy Details Screen

Follow these steps to export sets of Indicators that are associated to a Group or another Indicator from the Associations tab of the legacy Details screen for that Group or Indicator.

1. Navigate to the legacy Details screen for a Group or Indicator.
2. Select the Associations tab. The INDICATORS option is selected by default, displaying all Indicators associated to the Group or Indicator in the table (Figure 3). 

    

3. Select ThreatConnect CSV from the EXPORT dropdown at the lower-left corner of the screen. Fill out the fields on the Export Data window (Figure 4) as follows: 

    

   • Please select which fields to include in the export: Select the checkbox for each data type to be included in the CSV file. 
4. Click EXPORT. A file named ThreatConnectExport.csv will be downloaded to your local drive.

ThreatConnect^® is a registered trademark of ThreatConnect, Inc.

20005-01 v.11.A