How do I tell if the Threat Intelligence feed is working? The All threat Events has never showed anything (perhaps I don't have any threats for it to catch).
Is there anything to check to make sure that the LEM is getting the feeds correctly?.
The only thing I have done is click the check on Allow Log & Event Manager to detect threats, It never uncheck's itself if that helps.