Context
In the Intelligence module, each Object page offers an Export button (top right) that allows users to export an object's full threat context — including all or a subset of its associated relationships (SROs).
This feature directly addresses a recurring client need: extracting a scoped, threat-specific dataset from the platform. However, it remains largely undiscovered — clients are not aware it exists, and the current entry point (a generic "Export" button) does not communicate what it actually does.
A client recently requested the ability to export data specific to a threat, including automatic updates when new relationships appear. While the automated/live sync is out of scope for now, the manual export feature already covers the core need, it just needs to be surfaced properly.
Problem
-
The Export button label is too generic — it doesn't hint at the "threat context" scope of the export
-
No in-product signposting guides users toward this capability
-
In the modal, we talk about Categories, while in reality, we are talking about Relationships.
Acceptance criteria
- A user landing on an Object page for the first time can discover and understand the export feature without external guidance
- The export scope (object + relationships) is clearly communicated before and during the export flow

Context
In the Intelligence module, each Object page offers an Export button (top right) that allows users to export an object's full threat context — including all or a subset of its associated relationships (SROs).
This feature directly addresses a recurring client need: extracting a scoped, threat-specific dataset from the platform. However, it remains largely undiscovered — clients are not aware it exists, and the current entry point (a generic "Export" button) does not communicate what it actually does.
A client recently requested the ability to export data specific to a threat, including automatic updates when new relationships appear. While the automated/live sync is out of scope for now, the manual export feature already covers the core need, it just needs to be surfaced properly.
Problem
The Export button label is too generic — it doesn't hint at the "threat context" scope of the export
No in-product signposting guides users toward this capability
In the modal, we talk about Categories, while in reality, we are talking about Relationships.
Acceptance criteria