opencti icon indicating copy to clipboard operation
opencti copied to clipboard

Ability to export objects from multiple reports at once

Open securitiz opened this issue 3 years ago • 0 comments

Use case

Given a set number of reports that have observables / objects we care about, it would be useful to export the data contained in those reports at once, rather than one by one. In particular, it would be helpful to target what data we want to export, for example: just observables? just IPs, domains, files (including hashes)? Etc

Current Workaround

In Reports view, filter for the reports we care about (for example those that have the label 'ransomware'). For each report, click into it, and export the data in the report. Click out, select the next report, export, etc. Then, concatenate all the resulting spreadsheets.

Proposed Solution

In reports view, select the relevant reports. Select the export button. Have an option to select what kind of data to export, then export to csv.

Additional Information

If the feature request is approved, would you be willing to submit a PR?

Yes / No (Help can be provided if you need assistance submitting a PR)

securitiz avatar Aug 04 '22 02:08 securitiz