Exporting investigation results
Kaspersky Threat Intelligence Portal enables you to export investigation results about requested objects for further analysis. You can export the following data:
- Investigation results from all tables that are available for the requested object.
- Specific investigation results from a selected table.
You can run another request in a separate browser tab or window while Kaspersky Threat Intelligence Portal prepares and downloads a file with the investigation results of your previous request.
To export all investigation results:
- On the Threat Lookup (
) → Threat Lookup results page, click Export results at the top of the Threat Lookup results page. - In the drop-down list, select the file format that you want to export investigation results to: CSV archive, OpenIOC, or STIX.
For reserved IP addresses, only CSV archive format is available. The archive will only contain IpProperties.csv and WHOIS.csv files.
The Save As window opens.
Preparing a file with all investigation results for download may take several minutes.
Kaspersky Threat Intelligence Portal exports up to 1000 items from each data group.
- Select the location and click Save.
The file with investigation results for the requested object from all available data groups is saved to the specified location.
Detailed information about exporting results in various formats is provided in the following sections in Appendices.
To export investigation results from a selected data group:
- On the Threat Lookup () → Threat Lookup results page, click the Download data button near the name of the table that contains data you want to export.
The Save As window opens.
Kaspersky Threat Intelligence Portal exports up to 1000 items from a data group.
- Select the location and click Save.
You can change the file name if necessary.
The archive containing a CSV file with investigation results from the data group is saved to the specified location.