An XSOAR engineer has been tasked with exporting all indicators from the production environment in the last 90 days. The final report needs to be in CSV format containing all indicator fields. How can this task be achieved?
A.
Run the command !GetIndicatorsByQuery in CLI with its default arguments and export all indicators in the last 90 days.
B.
SSH into the server and copy the indicator's database.
C.
In the Threat Intel page, add query firstSeen:>="90 days ago", select All columns in Table View, and click Export to export as a CSV.
D.
Run the command !findIndicators in CLI with the query firstSeen:>="90 days ago" and export to CSV.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
piipo
3 months, 2 weeks ago