Alert: ThreatIntelligenceIndicator Table Retirement

Time to modify your rules

If you’re currently using the ThreatIntelligenceIndicator table to provide data intelligence to your Sentinel Analytics Rules or in Workbooks (and other things), you have just a couple months to make some changes.

On April 3rd, new tables (ThreatIntelObjects and ThreatIntelindicators) will be made available in public preview to give you time to migrate your existing collateral. GA for these tables is scheduled for May 31st, and the original ThreatIntelligenceIndicator table will no longer have data populated after July 31st.

See the original email from Microsoft below for full details.

Original email from Microsoft

Related: Announcing Public Preview: New STIX Objects in Microsoft Sentinel