Export Threat Data Object Details
Export threat data object details from the platform in various formats and download the exported file for offline analysis. You can export the details of a threat data object, such as the title, type, TLP, and more in XML (STIX 1.x), STIX 2.0, STIX 2.1, and MISP formats.
Note
You cannot export a report object details. However, you can export the relations of the report object. To export the top-level report content, export the report object from Main Menu > Collection > Threat Data.
Steps
To export the threat data object details, follow these steps:
Go to Main Menu > Collection > Threat Data, and select an object to export.
Click Export Threat Data and select one of the following file formats to export the details of the threat data object:
XML (Exports object details in the STIX 1.x expression)
Note
The STIX 1.x expression does not support custom property for SDOs. Therefore, the export does not include custom attributes of the objects.
STIX 2.0
STIX 2.1
MISP
The export task is processed in the background. You will receive an in-app notification after the threat data object details are exported. Click Download File to download the export file from the notification.
Export Object Relationships
You can export the relationship details of a threat data object, such as the object type, value, relationship type, source, and more, in CSV format. You can export a maximum of 10,000 relationships. If there are more than 10,000 relationships, the latest 10,000 relationships are exported.
Steps
To export the relationships of a threat data object, follow these steps:
Go to Main Menu > Collection > Threat Data, and select a threat data to export the relations.
Click Export Relations and select CSV to export the relations in CSV format.
The export task is processed in the background. You will receive an in-app notification after the relationship details of the threat data object are exported. Click Download File to download the export file from the notification.