October 27, 2026 - Application Update

Threat Intelligence Indicators

The Threat Intelligence page now has an Indicators tab, so you can view and search the individual threat intelligence indicators in your data store. Use it to confirm that an indicator was ingested, check which source supplied it, or verify that a source is delivering data.

From the tab, you can:

• Search indicators by value.
• Filter by source, indicator type, and confidence.
• Sort by type, confidence, last updated, source, or expiration date.
• Select an indicator to see its details and raw IOC data, and open related activity in Log Search.

New indicators can take up to 10 minutes to appear. Learn more.

note

The expired indicator retention period setting is deprecated with this release.