Automated Indicator Sharing (AIS) with TLD Restrictions

While using Recorded Future, you may encounter threat intelligence shared through the Automated Indicator Sharing (AIS) program. The AIS program is managed by the US Department of Homeland Security and is further documented here:

AIS threat intelligence is labeled using the Traffic Light Protocol (TLP), to ensure that sensitive information is shared exclusively with the appropriate audience. In Recorded Future, you will see a TLP designator on each AIS threat intelligence note. The TLP system is further explained here:

Recorded Future redistributes AIS threat intelligence labeled TLP:WHITE and TLP:GREEN only. You may share AIS threat intelligence with others, subject to these TLP restrictions. In particular, note that threat intel labeled TLP:GREEN, or higher, should not be shared via publicly accessible channels (blogs, social media, etc.)

Recorded Future, each AIS Participant and the National Cybersecurity & Communications Integration Center (NCCIC), to the maximum extent permitted by law, provide no representations or warranties regarding any Indicators or other data provided through AIS, or any other use of AIS.

More information

Was this article helpful?
0 out of 0 found this helpful

This content is confidential. Downloading or distributing this content is in violation of your Recorded Future license agreement. Sharing this content outside of licensed Recorded Future users constitutes a breach of the terms and/or agreement and shall be considered a breach by your organization.
Have more questions? Submit a request



Please sign in to leave a comment. Please note that your name will be displayed. If you would like to change how your name appears, please update your profile name.