[ URLHaus threat intelligence ]: create a new rule

[hilo21 (Hamza Ouadiâ)]

Hello,

Can you tell me please what kind of alerting mechanism you're using ?

• Watcher
• SIEM Detections

Also is the URLhaus events stored in a different index than your packetbeat or are these fields on the same Document ?

Thank you