---
title: Viewing Threat Intelligence External Sharing
description: Threat intelligence sharing provide a centralized view of various threat data sharing sources. The feature allows you to monitor the threat records that are being processed for intelligence sharing and manage the approval workflows for different types of intelligence data.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/threat-intelligence-security-center/tisc-intel-sharing-module.html
release: australia
product: Threat Intelligence Security Center
classification: threat-intelligence-security-center
topic_type: concept
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Administer, Threat Intelligence Security Center, Security Operations]
---

# Viewing Threat Intelligence External Sharing

Threat intelligence sharing provide a centralized view of various threat data sharing sources. The feature allows you to monitor the threat records that are being processed for intelligence sharing and manage the approval workflows for different types of intelligence data.

This section describes the following:

1.  Outbound intelligence
2.  Inbound intelligence
3.  TAXII Collections

## Outbound intelligence

Outbound intelligence refers to threat intelligence data that your organization shares with external entities.

As a TISC analyst you can review the associated details such as templates, profiles, groups, sharing entity attributes, exclusion rules, and approve or reject them before into the organization's intelligence systems. For more information, see [Exploring Outbound Intel Sharing](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-outbound-intel-sharing.md).

## Inbound intelligence

Inbound intelligence pertains to threat data received from the external sources. This section allows you to manage inbound intelligence data received from external systems.

Inbound intelligence is a group of collections which contain threat intelligence observables, indicators, and other threat objects which are known as Inbound Intelligence Records.

As a TISC analyst, you can review and approve or reject them before they are ingested into the organization's intelligence systems. For more information, see [Exploring Inbound Intel Sharing](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-inbound-intel-sharing.md).

## TAXII Collections

Trusted Automated Exchange of Intelligence Information \(TAXII\) is a protocol used for sharing of threat intelligence. For more information, see [Exploring TAXII Outbound Server](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-taxii-outbound-server.md).

-   **[Viewing Outbound Intelligence](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-view-outbound-intel.md)**  
Use this section to view all outbound intelligence sharing records. Review the intelligence data and take necessary actions to approve or reject them.
-   **[Viewing Inbound Intelligence](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-view-inbound-intel.md)**  
Use this section to view all inbound intelligence sharing records. Review the intelligence data and take necessary actions to approve or reject them.
-   **[Viewing TAXII Collections](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/threat-intelligence-security-center/tisc-view-taxii-collections.md)**  
Use this section to view the TAXII collections that are configured as part of TAXII Outbound Server.