- Case Manager Release Notes
- Get Started with Case Manager
- Configure Case Manager Settings
- Investigate a Security Incident
- Manually Create an Incident
- Edit an Incident
- Delete an Incident
- Manually Add an Entity
- Manually Add an Artifact
- Delete an Entity or Artifact
- Add Advanced Analytics Evidence to a Case Manager Incident
- Manage Tasks During an Investigation
- Send Messages from an Incident
- Filter Incidents
- Search for an Incident
- Sort Incidents
- Export Incidents
Export Incidents
To audit incidents, give details about incidents to people outside of your SOC, or archive and back up incident data to your local environment, export a list of incidents to a CSV file.
The CSV file contains one incident per row and all relevant incident fields. It only includes an incident's ten most recent case notes. You can export a maximum of 10,000 incidents at a time. If you have no incidents, exporting is disabled.
In CASE MANAGER, click EXPORT.
Specify the incident fields you want exported.
To include specific fields, click + next to the field. To find a specific field, start typing in the search.
To include all fields, click CLICK ALL.
To export fields predefined in a template, click ALL TEMPLATES, then select a template.
Click EXPORT.
Download the CSV file.