Threat Intelligence (Security)

Improvements to how threat intelligence indicators are searched:

• By default, only active threat intelligence indicators are available for search and Cloud SIEM entity enrichment. Learn more.
• You can now use the threatlookup operator to search threat intelligence indicators in your log data. Learn more.

This is in the rollout phase and will be available in all regions shortly.