Organization Exports allows Enterprise users to view, download, and automate the export of custom threat indicator feeds created by your organization. It serves as a centralized hub for all organization-specific search results and feeds, making it easy to manage, share, and integrate threat intelligence into your security operations.
Benefits of Organization Exports
Centralized Data Access — Manage all organization-created feeds in one location within Data Exports.
Flexible Export Options — Choose between manual downloads and fully automated recurring exports.
Seamless Integration — Push results directly from Feed Search into Organization Exports for streamlined workflows.
Intuitive Interface — Use a clean card-based layout to quickly view key details of each feed.
By using Organization Exports, security teams can significantly improve operational efficiency and accelerate threat detection and response.
How to Access Organization Exports
From the navigation menu, select Defend > Data Export.
Click the Category button at the top of the page
Select Organization Exports
Feed Information
Each feed card displays the following details:
Information Type | Description |
|---|---|
Name | Name of the feed |
Observables | Total number of observables (indicators) in the feed |
Download Credit Cost | Credits that will be deducted upon download |
Observable Type | Type of data in the feed (e.g., ipv4, domain, etc.) |
Created | Date the feed was created |
Description | Description added by the feed creator |
Available File Types | Supported download formats (CSV, JSON, TXT, RPZ, STIX, etc.) |
Export Options
Automate Export
Locate the desired feed
Click Automate Export
Choose your format
Copy the API Endpoint (valid for 3 hours)
Use the provided cURL, Python, or PHP code snippets for automation
Manual Download
Locate the desired feed
Click Download File
Select your preferred format
Click Download