WithSecure Elements EDR has launched new functionality in the Event Search view where you can export the data from the view into a comma-separated value (CSV) file.
The exported data will align with how it is displayed in the portal – for example, if you have added/removed/reordered the columns then this will be the layout (of the data) in the CSV file.
Please note there is currently a maximum limit of 500 rows that can be exported at any one time.
Localisation is supported with this functionality.
Benefits
With this functionality, you now have more flexibility, for example, if you need to share this information with fellow security analysts offline, combine it with telemetry from other systems, and/or manipulate the data more for further analysis, such as, in Excel using pivot tables.