---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Duplicate threat intelligence feeds

# Duplicate threat intelligence feeds {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Duplicate a threat feed to create an exact copy with all associated observables, indicators, and actors when you want to modify settings without affecting the original feed.

## Before you begin

Role required: sn_sec_tisc.admin

## Procedure

1. Navigate to WorkspacesThreat Intelligence Security Center.
2. Select the Integrations icon.
3. Select the desired integration from the Catalog view.  
   For example, select CrowdStrike
4. Select the Edit button for CrowdStrike feed card to open the configuration form.
5. Make the necessary changes, as required.
6. Select the More Actions menu and select Duplicate.  
   A confirmation appears indicating that the current feed configuration was duplicated and a new feed was created with the name \[<kbd class="ph userinput">integrationname Feed-copy</kbd>\]. For example, CrowdStrike Feed-copy.
{#tisc-duplicate-feeds__steps_wyb_sww_hbc}

*[\>]: and then