Export a threat’s timeline to a CSV file.

Parameters

ParameterDescription
Threat IDThe threat ID.

Example Output

"Time","Activity ID","Activity Description","Activity Secondary Description"

"May 04, 2025 09:45:15 AM",7856349012785634289,2028,"The management user David Johnson (david.johnson@techcorp.com) changed the incident status for ransomware.exe from Resolved to Unresolved",""

"May 04, 2025 09:45:12 AM",7856349012785634287,2028,"The management user David Johnson (david.johnson@techcorp.com) changed the incident status for ransomware.exe from Unresolved to Resolved",""

"May 04, 2025 09:45:10 AM",7856349012785634285,2029,"The escalation ticket for the threat ransomware.exe was modified by David Johnson (david.johnson@techcorp.com) from 567 to 568.",""

"May 04, 2025 09:45:09 AM",7856349012785634283,2029,"The escalation ticket for the threat ransomware.exe was modified by David Johnson (david.johnson@techcorp.com) from 568 to 567.",""

Workflow Library Example

Export Threat Timeline with Sentinelone and Send Results Via Email

Preview this Workflow on desktop