IOC collection export

This section provides information related to Kaspersky Endpoint Agent for Windows. This information may be partially or completely inapplicable to Kaspersky Endpoint Agent for Linux. For complete information about Kaspersky Endpoint Agent for Linux, please refer to the Help of the solution that includes the application: Kaspersky Anti Targeted Attack Platform or Kaspersky Managed Detection and Response.

To export an IOC collection:

1. Open Kaspersky Security Center Administration Console.
2. In Kaspersky Security Center Administration Console tree, open the Tasks folder.

   A list of tasks appears.

3. In the Run IOC Scan section, select the task in the list and right-click it to open the task action menu.
4. Select the Properties menu item.

   The task properties window opens.

5. Select the IOC Scan settings section.
6. In the IOC collection section click Export.
7. In the window that opens, specify the name of the file and select the folder where you want to save it.
8. Click the Save button.

   The application creates a ZIP file in the folder you specified.

See also Requirements for IOC files Supported IOC terms Creating and configuring Standard IOC Scan task Configuring Standard IOC Scan task Viewing IOC Scan task execution results

Page top