Forum Discussion
Deleting Threat Intelligence Indicators
Is the expectation that the "ThreatIntelligence" table counts should change when you delete indicators from the GUI or API? In my case I have been deleting thousands of old indicators via GUI/API...
I figured it out, when you delete them a new entry is created for the indicator with the "Active" field as false.