Duplicate threat intelligence feeds
Duplicate a threat feed to create an exact copy with all associated observables, indicators, and actors when you want to modify settings without affecting the original feed.
Before you begin
Role required: sn_sec_tisc.admin
Procedure
Navigate to Workspaces > Threat Intelligence Security Center.
Select the Integrations icon.
Select the desired integration from the Catalog view.
For example, select CrowdStrike
Select the Edit button for CrowdStrike feed card to open the configuration form.
Make the necessary changes, as required.
Select the More Actions menu and select Duplicate.
A confirmation appears indicating that the current feed configuration was duplicated and a new feed was created with the name [
integrationname Feed-copy]. For example, CrowdStrike Feed-copy.
Parent Topic:Threat Intelligence Feeds