cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1102
Views
0
Helpful
2
Replies

How to export allow/block lists from Cisco AMP?

jonsacbibit
Level 1
Level 1

We are currently needing anything block/allow listed in AMP for export, however this list is very extensive (hundreds of entries) and from the portal it only appears you can view them, and must click on each on to view the hashes/rule to copy. 

Is there a way to export these into a CSV or something? 

 

Thank you!

2 Replies 2

Matthew Franks
Cisco Employee
Cisco Employee

You can do this with the API.
https://developer.cisco.com/docs/secure-endpoint/#!file-list
https://developer.cisco.com/docs/secure-endpoint/#!file-list-item

The results are in JSON, not CSV though.

Thanks,

-Matt

alicitra
Level 1
Level 1

The export feature is still unavailable and it is disappointing, I have to export 91 hashes manually.