How to export allow/block lists from Cisco AMP?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-25-2023 12:33 PM
We are currently needing anything block/allow listed in AMP for export, however this list is very extensive (hundreds of entries) and from the portal it only appears you can view them, and must click on each on to view the hashes/rule to copy.
Is there a way to export these into a CSV or something?
Thank you!
- Labels:
-
AMP for Endpoints
-
Other AMP Topics

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
04-25-2023 12:44 PM
You can do this with the API.
https://developer.cisco.com/docs/secure-endpoint/#!file-list
https://developer.cisco.com/docs/secure-endpoint/#!file-list-item
The results are in JSON, not CSV though.
Thanks,
-Matt
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-02-2023 09:23 AM
The export feature is still unavailable and it is disappointing, I have to export 91 hashes manually.
