Using ServiceNow Otto for Threat Intelligence Security Center \(TISC\) generative AI skills

concept australia Updated Sep 10, 2026 1 min read using-now-assist-tisc.md
Raw file servicenow.com

Threat analysts can generate threat intelligence reports and summarize case management content from within their flow of work with ServiceNow Otto for Threat Intelligence Security Center (TISC).

Skills in global domain reuse

By default, all skills exist in the global domain. When you use AI in a domain-separated environment, users are only able to access data in their domain. For example, if a user uses the summarization skill, AI only uses material that exists in the user's domain when generating that summary. Additionally, there is no co-mingling of data for domain-separated instances when using generative AI skills. The data resides only on the instance, and the shared services used for generative AI do not persist any requests (prompts) and responses. For more information, see Domain separation in the AI Admin Hub console. (Note that global domain is not the same as global scope. For more information, see Exploring Next Experience pickers.)

Important: Some generative AI skills, AI agents, and agentic workflows are turned on by default. For more information, see AI agents, skills, and agentic workflows on by default.

With generative AI skills in ServiceNow Otto for Threat Intelligence Security Center (TISC), your threat analysts can summarize threat case management content in a concise, easy-to-read format. See Summarize a Case using generative AI.

Threat analysts can also generate threat intelligence reports directly from case data and export for stakeholder review. See Generate a Case Report using generative AI.

In Import Intelligence, threat analysts can upload an unstructured document and have AI extract the threat observables and objects from its content for review before import. See Import data using AI.

Search documentation
Search document titles and file paths on the australia branch