Case ManagerTrack and Maintain Security Incidents

Table of Contents

Export a List of Incidents to CSV

To audit incidents, give details about incidents to people outside of your SOC, or archive and back up incident data to your local environment, apply a filter to export a list of incidents to CSV.

The CSV file contains one incident per row and all relevant incident fields. It does not export case notes, entities, or artifacts. You can export a maximum of 10,000 incidents. If you have no incidents, exporting is disabled.

  1. Navigate to the INCIDENTS page.

  2. To gather the incidents you will export, apply a filter. To export all incidents, apply the ALL INCIDENTS filter.

  3. Next to the filter name, select the More The more options menu; three vertical grey dots on a white background. menu, then select Export.

  4. Download the CSV file.