Share Threat Intelligence data between TISC instances

---
title: Share Threat Intelligence data between TISC instances
description: You can share threat intelligence data between TISC instances using one of the following methods.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-config-sharing-instances.html
release: brazil
product: Threat Intelligence Security Center
classification: threat-intelligence-security-center
topic_type: concept
last_updated: "2026-09-10"
reading_time_minutes: 1
keywords: [sharing instances, threat intelligence sharing, instance configuration]
breadcrumb: [Administer, Threat Intelligence Security Center, Security Operations]
---

# Share Threat Intelligence data between TISC instances

You can share threat intelligence data between TISC instances using one of the following methods.

## Sharing Methods

-   **Manual sharing through the user interface \(GUI\)**: Manually curate and share intelligence records with a target instance through the TISC interface. For more information, see [Sharing of Outbound Intelligence Records from the GUI](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-create-intel-records-lib.html).
-   **Automated sharing using flows**: Configure flows to automatically share intelligence data to a target instance based on a defined condition. For more information, see [Automated Sharing of Outbound Intelligence Records](https://www.servicenow.com/docs/r/security-management/threat-intelligence-security-center/tisc-automated-outbound-intel-share.html).
-   **Sharing through a TAXII server**: Exchange threat intelligence data through TAXII collections using standardized threat intelligence sharing protocols. For more information, see [Exploring TAXII Outbound Server](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/threat-intelligence-security-center/tisc-taxii-outbound-server.md).

**Data transfer mechanism**

-   For Manual sharing via GUI and automated flow based sharing, the source TISC instance pushes the data directly to the target instance.
-   For TAXII based sharing, the target TISC instance pulls data from TAXII collections configured on the source instance.

**Related topics**  


[Sharing of Outbound Intelligence Records from GUI](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/threat-intelligence-security-center/tisc-create-intel-records-lib.md)

[Automated Sharing of Outbound Intelligence Records](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/threat-intelligence-security-center/tisc-automated-outbound-intel-share.md)

[Automated Sharing of TAXII Collections](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/brazil/markdown/security-management/threat-intelligence-security-center/tisc-automated-share-taxii.md)