Duplicate threat intelligence feeds

---
title: Duplicate threat intelligence feeds
description: Duplicate a threat feed to create an exact copy with all associated observables, indicators, and actors when you want to modify settings without affecting the original feed.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/tisc-duplicate-feeds.html
release: australia
product: Threat Intelligence Security Center
classification: threat-intelligence-security-center
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
keywords: [duplicate feeds, threat intel feeds, CrowdStrike, feed configuration]
breadcrumb: [Threat Intelligence Feeds, Integrate, Threat Intelligence Security Center, Security Operations]
---

# Duplicate threat intelligence feeds

Duplicate a threat feed to create an exact copy with all associated observables, indicators, and actors when you want to modify settings without affecting the original feed.

## Before you begin

Role required: sn\_sec\_tisc.admin

## Procedure

1.  Navigate to **Workspaces** > **Threat Intelligence Security Center**.

2.  Select the **Integrations** icon.

3.  Select the desired integration from the **Catalog** view.

    For example, select CrowdStrike

4.  Select the **Edit** button for CrowdStrike feed card to open the configuration form.

5.  Make the necessary changes, as required.

6.  Select the **More Actions** menu and select **Duplicate**.

    A confirmation appears indicating that the current feed configuration was duplicated and a new feed was created with the name \[`integrationname Feed-copy`\]. For example, CrowdStrike Feed-copy.


**Parent Topic:**[Threat Intelligence Feeds](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/threat-intelligence-feeds.md)