Skip to content

ti_anomali: Make agent-based as default deployment mode #17254

Closed
#17253
Closed
ti_anomali: Make agent-based as default deployment mode#17254
#17253
Assignees
kcreddy
Labels
Category: Integration qualityCategory: Quality used for SI planningIntegration:ti_anomaliAnomali ThreatStreamTeam:Security-Service IntegrationsSecurity Service Integrations team [elastic/security-service-integrations]bugfixPull request that fixes a bug issue
@kcreddy

Description

@kcreddy
kcreddy
opened on Feb 5, 2026

Unlike other API-based threat intel integrations, Anomali has Agentless mode as default deployment mode.
Update the default deployment to Agent-based.

anomali-agentless.mp4

Metadata

Metadata

Assignees

Labels

Category: Integration qualityCategory: Quality used for SI planningIntegration:ti_anomaliAnomali ThreatStreamTeam:Security-Service IntegrationsSecurity Service Integrations team [elastic/security-service-integrations]bugfixPull request that fixes a bug issue

Type

No type

Fields

No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions