--- sourceDocument: xanadu Combined Product Files sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/delta-vancouver-xanadu Release : - yokohama ft:locale : - en-US ft:publication_title : - xanadu Combined Product Files ft:clusterId : - delta3xv bundleId : - delta3xv --- Combined Threat Intelligence Security Center release notes for upgrades from Vancouver to Xanadu ================================================================================================ Combined Threat Intelligence Security Center release notes for upgrades from Vancouver to Xanadu {#ariaid-title1} ================================================================================================================= * Release version: Yokohama * * Updated January 30, 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 7 minutes to read Consolidated page of all release notes for Threat Intelligence Security Center from Vancouver to Xanadu. How to use this page -------------------- To help you prepare for your upgrade, we have combined the cross-family Threat Intelligence Security Center release notes onto one page. Read this summary of the new features, changes, and updated information for your product from Vancouver to Xanadu. Tip: If there were no updates for a release notes section in a certain family release, we included a short note for your reference. For example, if a product did not have any updates in Tokyo, the row says "No updates for this release." Important information for upgrading Threat Intelligence Security Center to Xanadu --------------------------------------------------------------------------------- Before you upgrade to Xanadu, review these pre- and post-upgrade tasks and complete the tasks as needed. {#dfrn3-threatintelligencesecuritycenter-summary__entry__2} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | | Xanadu | No updates for this release. | [ ] New features ------------ Between your current release family and Xanadu, new features were introduced for Threat Intelligence Security Center. {#dfrn3-threatintelligencesecuritycenter-summary__entry__10} | Release | Release notes | |---------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Vancouver | [View Threat Intelligence Security Center Homepage](https://www.servicenow.com/docs/access?context=view-threat-intelligence-security-center-homepage&family=vancouver&ft:locale=en-US) : Data visualization to the threat intelligence. [Threat Intelligence Security Center Catalog](https://www.servicenow.com/docs/access?context=threat-intelligence-security-center-catalogue&family=vancouver&ft:locale=en-US) : The catalog provides a curated list of Threat Intelligence feeds and enrichment integrations by enabling them after adding the required information, and also schedule the feeds | | Washington DC | [View Threat Intelligence Security Center Homepage](https://www.servicenow.com/docs/access?context=view-threat-intelligence-security-center-homepage&family=washingtondc&ft:locale=en-US) : Threat Intelligence Security Center homepage provides the data visualization to the threat intelligence. [Threat Intelligence Security Center Catalog](https://www.servicenow.com/docs/access?context=threat-intelligence-security-center-catalogue&family=washingtondc&ft:locale=en-US) : The catalog provides a curated list of Threat Intelligence feeds and enrichment integrations by enabling them after adding the required information, and also schedule the feeds [Threat Intelligence Feeds](https://www.servicenow.com/docs/access?context=threat-intelligence-feeds&family=washingtondc&ft:locale=en-US) : Ability that provides the integration of premium feeds to enhance threat intelligence. [TISC Enrichment Integrations](https://www.servicenow.com/docs/access?context=tisc-enrichment-integrations&family=washingtondc&ft:locale=en-US) : Enrichment capabilities, for the removal of false positives, confidence/scoring of indicators, validation of indicators, and the addition of contextual information. [Administration](https://www.servicenow.com/docs/access?context=tisc-data-administration&family=washingtondc&ft:locale=en-US) : The Administration module enables the users to define correlation rules for establishing relationships between observables. Customize threat score calculator for nuanced threat assessment and also the integration of internal intelligence encompassing VR, SIR, Assets, Services, and CMDB. [TISC integration with SIR Workspace](https://www.servicenow.com/docs/access?context=tisc-integration-with-sir-workspace&family=washingtondc&ft:locale=en-US) : Seamless integration with SIR and data migration capabilities from Threat Intelligence to Threat Intelligence Security Center. [Threat Intelligence Security Center Library](https://www.servicenow.com/docs/access?context=threat-intelligence-security-center-library&family=washingtondc&ft:locale=en-US) : Threat Analyst library is a dedicated Threat Intel Analyst Workspace for streamlined operations. [Threat Analyst Workbench](https://www.servicenow.com/docs/access?context=threat-analyst-workbench&family=washingtondc&ft:locale=en-US) : Ability to create cases or case tasks using Threat Analyst Workbench to create and track the threat investigations and analysis activities. | | Xanadu | [\[Placeholder link text to key bundle-security.view-associated-techniques\]](https://www.servicenow.com/docs/access?context=view-associated-techniques&family=xanadu&ft:locale=en-US) : All observables, indicators, and entities now supports MITRE technique associations. [Roll up of MITRE technique associations](https://www.servicenow.com/docs/access?context=tisc-mitre-roll-up&family=xanadu&ft:locale=en-US) : MITRE techniques can now be rolled up from artifacts at a case level both manually and automatically. [Palo Alto Networks integration](https://www.servicenow.com/docs/access?context=palo-alto-networks-integration&family=xanadu&ft:locale=en-US) : Integration with Palo Alto is now available to manage External Dynamic Lists (EDLs) directly from TISC. [CrowdStrike Falcon EDR integration](https://www.servicenow.com/docs/access?context=crowdstrike-edr-integration&family=xanadu&ft:locale=en-US) : Integration with CrowdStrike Falcon EDR is now available for continuous monitoring and real-time alerting based on TISC intelligence. [Working with Investigation Canvases](https://www.servicenow.com/docs/access?context=tisc-investigation-canvases&family=xanadu&ft:locale=en-US) : Introduced a new Investigation Canvas for deeper and interactive case analysis. [View details in Relationship Graph](https://www.servicenow.com/docs/access?context=objects-visualizer&family=xanadu&ft:locale=en-US) : Enhanced the user experience on relationship visualizations. [Bulk import Taxonomies](https://www.servicenow.com/docs/access?context=tisc-import-taxonomy&family=xanadu&ft:locale=en-US) : Supports bulk taxonomy values upload. [TISC API References](https://www.servicenow.com/docs/access?context=tisc-api-references&family=xanadu&ft:locale=en-US) : Creating observables in TISC is now available through the implementation of TISC API 2.0. [Defining Expiration Rules](https://www.servicenow.com/docs/access?context=tisc-expiration-rules&family=xanadu&ft:locale=en-US) : Define expiration policies at a more granular level by creating expiration rules for data source and record type combinations. [Working with Webhooks](https://www.servicenow.com/docs/access?context=tisc-webhooks&family=xanadu&ft:locale=en-US) : Initiate trigger-based notifications by using Webhooks. [Working with automated flows](https://www.servicenow.com/docs/access?context=tisc-automated-flows&family=xanadu&ft:locale=en-US) : Automate analyst actions through sample automation flows. [Add observables to TISC Case](https://www.servicenow.com/docs/access?context=observables-to-case&family=xanadu&ft:locale=en-US) : Add security incident and observables directly to a TISC case in the Security Incident Response Workspace. [MITRE ATT\&CK Technique Extraction Rules](https://www.servicenow.com/docs/access?context=mitre-extraction-rules&family=xanadu&ft:locale=en-US) : Capture automatically extracted MITRE techniques to the intelligence records such as observables, indicators, and all STIX entities. | [ ] Changes ------- Between your current release family and Xanadu, some changes were made to existing Threat Intelligence Security Center features. {#dfrn3-threatintelligencesecuritycenter-summary__entry__18} | Release | Release notes | |---------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | | Xanadu | [TISC Library Repository](https://www.servicenow.com/docs/access?context=tisc-ioc&family=xanadu&ft:locale=en-US) : New aliases can now be added directly from the form views of the threat intelligence library. | [ ] Removed ------- Between your current release family and Xanadu, some Threat Intelligence Security Center features or functionality were removed. {#dfrn3-threatintelligencesecuritycenter-summary__entry__26} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | | Xanadu | No updates for this release. | [ ] Deprecations ------------ Between your current release family and Xanadu, some Threat Intelligence Security Center features or functionality were deprecated. {#dfrn3-threatintelligencesecuritycenter-summary__entry__34} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | | Xanadu | No updates for this release. | [ ] Activation information ---------------------- Review information on how to activate Threat Intelligence Security Center. {#dfrn3-threatintelligencesecuritycenter-summary__entry__42} | Release | Release notes | |---------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Vancouver | Install Threat Intelligence Security Center by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=vancouver&ft:locale=en-US). | | Washington DC | Install Threat Intelligence Security Center by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=washingtondc&ft:locale=en-US). | | Xanadu | Install Threat Intelligence Security Center by requesting it from the ServiceNow Store. Visit the [ServiceNow Store](https://store.servicenow.com/sn_appstore_store.do#!/store/home) website to view all the available apps and for information about submitting requests to the store. For cumulative release notes information for all released apps, see the [ServiceNow Store version history release notes](https://www.servicenow.com/docs/access?context=sn-store-release-notes&family=xanadu&ft:locale=en-US). [Security Operations common functionality](https://www.servicenow.com/docs/access?context=sec-ops-common-functionality&family=xanadu&ft:locale=en-US) : When any of the plugins for the main Security Operations applications (Security Incident Response, Vulnerability Response, Threat Intelligence, or Configuration Compliance) are activated, the Security Support Common plugin is activated. | [ ] Additional requirements ----------------------- If any additional requirements were introduced or changed for Threat Intelligence Security Center we have noted them here. {#dfrn3-threatintelligencesecuritycenter-summary__entry__50} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | | Xanadu | No updates for this release. | [ ] Browser requirements -------------------- If any specific browser requirements were introduced or changed for Threat Intelligence Security Center we have noted them here. {#dfrn3-threatintelligencesecuritycenter-summary__entry__58} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | | Xanadu | No updates for this release. | [ ] Accessibility information ------------------------- Review details on accessibility information for Threat Intelligence Security Center, such as specific requirements or compliance levels. {#dfrn3-threatintelligencesecuritycenter-summary__entry__66} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | | Xanadu | No updates for this release. | [ ] Localization information ------------------------ If there are specific localization considerations for Threat Intelligence Security Center we have noted them here. {#dfrn3-threatintelligencesecuritycenter-summary__entry__74} | Release | Release notes | |---------------|------------------------------| | Vancouver | No updates for this release. | | Washington DC | No updates for this release. | | Xanadu | No updates for this release. | [ ] Highlight information --------------------- If there are specific highlight considerations for Threat Intelligence Security Center we have noted them here. {#dfrn3-threatintelligencesecuritycenter-summary__entry__82} | Release | Release notes | |---------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Vancouver | * Threat data collection and curation by assisting the Cyber Threat Intelligence (CTI) teams in organizing and managing threat intelligence gathered from various sources through the collection, processing, and aggregation of data. * Threat Hunting helps analysts in searching for threats using curated intelligence and the MITRE Kill Chain Framework. * Threat Research: Analysts have the ability to conduct research on threats, supporting the reactive and proactive needs of security teams. * The CTI teams can utilize dashboards and assigned threat scores to prioritize the development of defenses against critical threats. * Threat investigation helps the teams to create and track threat investigations using the Case Management feature. See [Threat Intelligence Security Center](https://www.servicenow.com/docs/access?context=tisc-landing-page&family=vancouver&ft:locale=en-US) for more information. | | Washington DC | * Threat data collection and curation by assisting the Cyber Threat Intelligence (CTI) teams in organizing and managing threat intelligence gathered from various sources through the collection, processing, and aggregation of data. * Threat hunting helps analysts in searching for threats using curated intelligence and the MITRE Kill Chain Framework. * Threat Analysts have the ability to conduct research on threats, supporting the reactive and proactive needs of security teams. * The Cyber Threat Intelligence teams can utilize the dashboards and assigned threat scores to prioritize the development of defenses against critical threats. * Threat investigation helps the teams to create and track threat investigations using the Case Management feature. See [Threat Intelligence Security Center](https://www.servicenow.com/docs/access?context=tisc-landing-page&family=washingtondc&ft:locale=en-US) for more information. | | Xanadu | * Visualize node connections between entities like observables, IOCs, and threat actors, and link cases or canvases to enrich analysis. * Enable continuous monitoring and real-time alerts based on intelligence from TISC with CrowdStrike Falcon EDR integration. * Block malicious IPs, URLs, and domains using External Dynamic List (EDL) capabilities with Threat Intelligence data and Palo Alto Networks integration. * Manage the analyst actions through automation flows. * Conduct research on threats to support the reactive and proactive needs of security teams. * Create and track threat investigations using Case Management. See [Threat Intelligence Security Center](https://www.servicenow.com/docs/access?context=tisc-landing-page&family=xanadu&ft:locale=en-US) for more information. | [ ]