---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Share Threat Intelligence data between TISC instances

# Share Threat Intelligence data between TISC instances {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

You can share threat intelligence data between TISC instances using one of the following methods.

## Sharing Methods {#tisc-config-sharing-instances__section_bns_nkn_33c}

* Manual sharing through the user interface (GUI): Manually curate and share intelligence records with a target instance through the TISC interface. For more information, see [Sharing of Outbound Intelligence Records from the GUI](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-intel-records-lib.html).
* Automated sharing using flows: Configure flows to automatically share intelligence data to a target instance based on a defined condition. For more information, see [Automated Sharing of Outbound Intelligence Records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-automated-outbound-intel-share.html).
* Sharing through a TAXII server: Exchange threat intelligence data through TAXII collections using standardized threat intelligence sharing protocols. For more information, see [Exploring TAXII Outbound Server](https://servicenow-prod.fluidtopics.net/BKYGzZOoPyaMVjaTYNQzxg "TAXII collections are logical groupings of threat intelligence data.").
{#tisc-config-sharing-instances__ul_e3b_r1g_m3c}  
Data transfer mechanism

* For Manual sharing via GUI and automated flow based sharing, the source TISC instance pushes the data directly to the target instance.
* For TAXII based sharing, the target TISC instance pulls data from TAXII collections configured on the source instance.
{#tisc-config-sharing-instances__ul_dtg_nmn_33c}
**Related tasks**   

* [Sharing of Outbound Intelligence Records from GUI](https://servicenow-prod.fluidtopics.net/b~DwM~dlSXMJ5pYPtajp_g "This section outlines the functionality that enables users to share intelligence records directly from the Threat Intelligence (TI) Library within the TISC application.")
* [Automated Sharing of Outbound Intelligence Records](https://servicenow-prod.fluidtopics.net/tLdWvwun0RV7_Xq9uc3J1w "Automated Outbound Intelligence Sharing enables the seamless and automatic distribution of intelligence records to external systems.")
* [Automated Sharing of TAXII Collections](https://servicenow-prod.fluidtopics.net/bInKcF1OgZu6a7O~1gDEGQ "Automated TAXII Collections automatically add intelligence records to TAXII Server Collections for seamless distribution to trusted external partners.")