Aug 12 2022 12:59 PM
I’m sure there’s some organizational reason why Anomali wants to detach itself from maintaining these feeds.
If you use these feeds for Microsoft Sentinel demos, consider querying the ThreatIntelligenceIndicator table for the Limo feeds and exporting the results to save them for later for when the active feed dries up.
ThreatIntelligenceIndicator | where SourceSystem contains "Limo"
You can then use our new functionality to import flat files into ThreatIntelligence and reuse the continually stale indicators.