While in most cases, the Cortex XSOAR Indicators Share integration is used to share indicators, indicators can also be shared manually. You might want to do this to share a few indicators or to share indicators that would not be returned using the indicator query you have set in the Cortex XSOAR Indicators Share instance.
You can manually share one or more indicators from the Threat Intel (Indicators) page. When you share an indicator, the indicator is stored in a dedicated shared index in Elasticsearch, and can be fetched by other tenants, using the Elasticsearch Feed integration.
Go to the Threat Intel (Indicators) page and search for the indicator(s) you want to share.
Select the indicator(s) and Share the indicator(s).