I have 1k+ IoC that all generate alert, and we are getting alert fatigue and trying to adjust it so that they do not generate alert. So the easiest way is to export the current list, modify it, and then delete whats on the platform, and import the edited list.
Also, when I try to import a IoC csv file, even a edited sample csv, it fails every time. No indication why, other that stating failed to import.
This is concern also for exporting the IoC list from transition.security.microsoft.com to security.microsoft.com
