The "Export Observables as CSV" workflow template is designed to streamline the process of gathering and exporting specific types of observables into a CSV format. This tool is particularly useful for professionals engaged in case management, threat hunting, and threat intelligence enrichment. By selecting an observable type, users can efficiently compile and convert data, enhancing their ability to analyze and respond to security incidents with organized, actionable insights.
Use Cases
Case Management , Threat Hunting , Threat Intelligence Enrichment
Workflow Breakdown
Select an observable type from the interaction dropdown list.
Paginate through all results to collect the most important data in a flattened format.
Merge the summary and convert it to CSV.
Vendors
Scripting, Utils, Torq Cases
Workflow Output
A link to download the summary of the selected Observable types in CSV format.