You can download the XML for a riskware alert from the Analysis > Analysis Details page.
To download the XML for a riskware alert:
In the Web UI, click Analysis.
Click an alert ID in the table. The Analysis Details page is displayed.
Click Download XML on the right side of the page.
Save the file.