Hello,
As per ES official documentation, it says below threat intel feeds are enabled by default.
In addition it also mentions these are included
But when i check in our ES app settings >> Threat Intel management page, i see only 3 feeds as below. Where are those default feeds mentioned above ?