New Blog Post | Anomali Limo Feeds for Microsoft Sentinel to Expire for Good

Brass Contributor

JasonCohen1994_0-1660334096065.png

Anomali Limo Feeds for Microsoft Sentinel to Expire for Good - Azure Cloud & AI Domain Blog (azurecl...

 

I’m sure there’s some organizational reason why Anomali wants to detach itself from maintaining these feeds.

 

If you use these feeds for Microsoft Sentinel demos, consider querying the ThreatIntelligenceIndicator table for the Limo feeds and exporting the results to save them for later for when the active feed dries up.

ThreatIntelligenceIndicator
| where SourceSystem contains "Limo"

You can then use our new functionality to import flat files into ThreatIntelligence and reuse the continually stale indicators.

0 Replies