Splunk App for Enterprise Security: Where is the threatlist stored?

[kedjjang]

Hello,

Retrieving the threatlist through the URL in Enterprise Security, I would like to know if is stored in csv.

[mdessus_splunk]

Hello,

have a look in the /opt/splunk/etc/apps/SA-ThreatIntelligence/lookups directory.