Forum Discussion
New Blog Post | Anomali Limo Feeds for Microsoft Sentinel to Expire for Good
I’m sure there’s some organizational reason why Anomali wants to detach itself from maintaining these feeds.
If you use these feeds for Microsoft Sentinel demos, consider querying the ThreatIntelligenceIndicator table for the Limo feeds and exporting the results to save them for later for when the active feed dries up.
ThreatIntelligenceIndicator | where SourceSystem contains "Limo"
You can then use our new functionality to import flat files into ThreatIntelligence and reuse the continually stale indicators.
No RepliesBe the first to reply
