Automated Sharing of Outbound Intelligence Records

Administer › Threat Intelligence Security Center › Security Operations

Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Automated Outbound Intelligence Sharing enables the seamless and automatic distribution of intelligence records to external systems.

Before you begin

Role required:

The automated flow action creates an outbound intelligence sharing record with the specified records and processes them accordingly.

Creating an outbound intelligence share record via automated process:

Navigate to All > Threat Intelligence Security Center > Administration.
Select Automated Flows.
Select Automated sharing of high-risk IOC's with trusted partners action link to view the respective rule details in the flow designer.
View the flow designer action for the following triggers:
```
Daily at 12.00.00
Run every day once
```

Go to Actions

Action	Description
Select the Sharing Template	Templates with a usage mode of both On-Demand and Automated Sharing, and Automated Sharing can be selected for Automated Sharing.
List of Observables	Select the type of observables record to add to an outbound intelligence record.
List of Indicators	Select the type of indicators to add to an outbound intelligence record.
List of Objects	Select the type of objects to add to an outbound intelligence record.
Include Related Records	Add the related records of the selected observables, including indicators and objects.
Requires approval	Select the check box that requires approval for the outbound intelligence record. Defining Approval Rule for Outbound Intel.
Users assigned to approve requests	Select the users responsible for reviewing and approving outbound intelligence sharing record. For more information, see Defining Approval Rule for Outbound Intel.
Groups assigned to approve requests	Select the groups responsible for reviewing and approving outbound intelligence sharing record. Defining Approval Rule for Outbound Intel.

Activate the flow. For more information on automated flows, see Automated sharing of high-risk IOC's with trusted partners.