{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":45516,"path":"security-management/threat-intelligence-security-center/tisc-automated-outbound-intel-share.md","title":"Automated Sharing of Outbound Intelligence Records","bundle":null,"doc_type":null,"release":"australia","body":"\n# Automated Sharing of Outbound Intelligence Records\n\nAutomated Outbound Intelligence Sharing enables the seamless and automatic distribution of intelligence records to external systems.\n\n## Before you begin\n\nRole required:\n\n-   System Administrator \\(view, create or edit\\)\n-   sn\\_sec\\_tisc.admin \\(view\\)\n\n## About this task\n\nThe automated flow action creates an outbound intelligence sharing record with the specified records and processes them accordingly.\n\nCreating an outbound intelligence share record via automated process:\n\n## Procedure\n\n1.  Navigate to **All** > **Threat Intelligence Security Center** > **Administration**.\n\n2.  Select **Automated Flows**.\n\n3.  Select **Automated sharing of high-risk IOC's with trusted partners** action link to view the respective rule details in the flow designer.\n\n4.  View the flow designer action for the following triggers:\n\n    ```\n    Daily at 12.00.00\n    Run every day once\n    ```\n\n5.  Go to **Actions**\n\n    |Action|Description|\n    |------|-----------|\n    |**Select the Sharing Template**|Templates with a usage mode of both **On-Demand and Automated Sharing**, and **Automated Sharing** can be selected for Automated Sharing.|\n    |**List of Observables**|Select the type of observables record to add to an outbound intelligence record.|\n    |**List of Indicators**|Select the type of indicators to add to an outbound intelligence record.|\n    |**List of Objects**|Select the type of objects to add to an outbound intelligence record.|\n    |**Include Related Records**|Add the related records of the selected observables, including indicators and objects.|\n    |**Requires approval**|Select the check box that requires approval for the outbound intelligence record. [Defining Approval Rule for Outbound Intel](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-approval-outbound-intel.md).|\n    |**Users assigned to approve requests**|Select the users responsible for reviewing and approving outbound intelligence sharing record. For more information, see [Defining Approval Rule for Outbound Intel](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-approval-outbound-intel.md).|\n    |**Groups assigned to approve requests**|Select the groups responsible for reviewing and approving outbound intelligence sharing record. [Defining Approval Rule for Outbound Intel](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-approval-outbound-intel.md).|\n\n6.  Select **Done**.\n\n\n## What to do next\n\nActivate the flow. For more information on automated flows, see [Automated sharing of high-risk IOC's with trusted partners](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-automated-sharing-flow.md).\n\n**Related topics**  \n\n\n[Configuring Outbound Intel Sharing Controls](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-outbound-sharing.md)\n\n[Sharing of Outbound Intelligence Records from GUI](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-create-intel-records-lib.md)\n\n"}}