Export a threat’s timeline to a CSV file.
Parameter | Description |
---|---|
Threat ID | The threat ID. |
"Time","Activity ID","Activity Description","Activity Secondary Description"
"May 04, 2025 09:45:15 AM",7856349012785634289,2028,"The management user David Johnson (david.johnson@techcorp.com) changed the incident status for ransomware.exe from Resolved to Unresolved",""
"May 04, 2025 09:45:12 AM",7856349012785634287,2028,"The management user David Johnson (david.johnson@techcorp.com) changed the incident status for ransomware.exe from Unresolved to Resolved",""
"May 04, 2025 09:45:10 AM",7856349012785634285,2029,"The escalation ticket for the threat ransomware.exe was modified by David Johnson (david.johnson@techcorp.com) from 567 to 568.",""
"May 04, 2025 09:45:09 AM",7856349012785634283,2029,"The escalation ticket for the threat ransomware.exe was modified by David Johnson (david.johnson@techcorp.com) from 568 to 567.",""
Export Threat Timeline with Sentinelone and Send Results Via Email
Preview this Workflow on desktop
Was this page helpful?