Import Intelligence in TISC

concept australia Updated Sep 10, 2026 2 min read importing-threat-intelligence.md
Raw file servicenow.com

Use this feature to manually import threat intelligence data into the repository, enabling analysts to ingest the relevant information from external sources as needed.

The following formats are supported for importing threat intelligence data:

Import Format

Description

Records Supported

Import from structured file

Download the sample file using the Preview link, and upload your structured data in a compatible format such as CSV, XLS, or XLSX.

  • Observables
  • Indicators

Import from standard format

Supported file types includeSTIX 2.x JSON and MISP JSON formats.

  • STIX 2.1: Observables, Indicators
  • MISP: Observables

Import from raw text

Parse the input as raw text to import observables. The maximum character limit for the input is 10,000 characters.

Observables

Import from file (unstructured)

The application will automatically parse the uploaded file to extract observables.Supported file types: TXT, CSV, JSON, XLS, and XLSX.

Observables

Import using AI

AI extracts the threat entities from the content of the uploaded file.Supported file types: PDF, DOCX, JPEG, and PNG.

Available with Threat Intelligence Security Center-Advanced.

Selected types of observables and objects

For a better understanding of each import format and the types of records supported, refer to the Related Information section.

Related topics

Import data using structured file

Import data using standard format

Import data using raw text

Import data using unstructured file format

Import data using AI

Keywords import intelligencemanual importthreat intelligence import
Search documentation
Search document titles and file paths on the australia branch