> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Export Threat Timeline

Export a threat's timeline to a CSV file.

## Parameters

<div className="integrations-table">
  | Parameter | Description    |
  | --------- | -------------- |
  | Threat ID | The threat ID. |
</div>

## Example Output

```json theme={"dark"}
"Time","Activity ID","Activity Description","Activity Secondary Description"

"May 04, 2025 09:45:15 AM",7856349012785634289,2028,"The management user David Johnson (david.johnson@techcorp.com) changed the incident status for ransomware.exe from Resolved to Unresolved",""

"May 04, 2025 09:45:12 AM",7856349012785634287,2028,"The management user David Johnson (david.johnson@techcorp.com) changed the incident status for ransomware.exe from Unresolved to Resolved",""

"May 04, 2025 09:45:10 AM",7856349012785634285,2029,"The escalation ticket for the threat ransomware.exe was modified by David Johnson (david.johnson@techcorp.com) from 567 to 568.",""

"May 04, 2025 09:45:09 AM",7856349012785634283,2029,"The escalation ticket for the threat ransomware.exe was modified by David Johnson (david.johnson@techcorp.com) from 568 to 567.",""
```

## Workflow Library Example

[Export Threat Timeline with Sentinelone and Send Results Via Email](https://library.blinkops.com/workflows/export-threat-timeline-with-sentinelone-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/export-threat-timeline-with-sentinelone-and-send-results-via-email/canvas" />
</div>