Meta issue https://github.com/elastic/security-team/issues/5868 for detailed info.

Once support for IOC expiration has been implemented in https://github.com/elastic/security-team/issues/6114 then this should be applied (if necessary) in all the ti_* packages. The following list of packages are in priority order:

• ti_abusech (Free)
• ti_otx (Free)
• ti_misp (Free)
• ti_cybersixgill (Commercial)
• ti_threatq (Commercial)
• ti_cif3 (Free)
• ti_rapid7_threat_command (Commercial)
• ti_anomali (Commercial)
• ti_recordedfuture (Commercial)
• ti_opencti (Free)