Hello,
As per ES official documentation, it says below threat intel feeds are enabled by default.
- Mozilla Public Suffix List
- MITRE ATT&CK Framework
- ICANN Top-level Domains List
In addition it also mentions these are included
But when i check in our ES app settings >> Threat Intel management page, i see only 3 feeds as below. Where are those default feeds mentioned above ?
