Exporting data and importing to Xcitium instance?

Help & Support
1

I am building soc lab environment to mentor students on using a SIEM and an EDR. I currently have Splunk installed in the environment and plan on exporting the logs and importing back into the student’s Splunk instances for them to practice with.

Does Xcitium have the ability to export data and import into another Xcitium instance? I think it would be good for students to get hands on EDR experience and reviewing processes trees. As an alternative, I am thinking of sending the OpenEDR telemetry to Splunk to be included in the export.

Thank you

2

hi @antiruse

Apologies to say that as of now we do not have this feature readily available. We have already taken your suggestion into note for future feature requests. Our development team will take a look into it for further improvements.

thank you