Export rule data from the current report in CSV format so that you can further process the data or view it in Excel.
You must be an administrator to complete this task.
About this task
- On the IBM® Detection and Response Center page, click the Download icon.
- Enter a name for the CSV file and click Export. Tip: If you want to adjust the content to export, such as including attributes for Sigma or QRadar® rules, use the option to control column visibility and order (gear icon) on the report menu bar.
Use the CSV file to further investigate your rules.