Exporting Attack Flows

MITRE Attack Flowsv2.0 flows available through ThreatStream can be exported to a JSON file.

You can export an attack flow in one of the following ways:

• From the attack flow details page. For details, see Viewing Attack Flow Details.

• From the Attack Flows page. See the instructions below.

To export a MITRE attack flow from the Attack Flows page:

1. Navigate to ThreatStream > Analyze > Attack Flow.

2. Select the attack flow of your interest.

   

3. Click Export to JSON.

   The downloading process starts immediately.