Export a List of Incidents to CSV
To audit incidents, give details about incidents to people outside of your SOC, or archive and back up incident data to your local environment, apply a filter to export a list of incidents to CSV.
The CSV file contains one incident per row and all relevant incident fields. It does not export case notes, entities, or artifacts. You can export a maximum of 10,000 incidents. If you have no incidents, exporting is disabled.
Navigate to the INCIDENTS page.
To gather the incidents you will export, apply a filter. To export all incidents, apply the ALL INCIDENTS filter.
Next to the filter name, select the More menu, then select Export.
Download the CSV file.