{
  "threat_intel": {
    "CISA Advisories": "https://www.cisa.gov/cybersecurity-advisories/all.xml",
    "CISA Alerts": "https://www.cisa.gov/cybersecurity-advisories/alerts.xml",
    "CISA ICS Advisories": "https://www.cisa.gov/cybersecurity-advisories/ics-advisories.xml",
    "SANS Internet Storm Center": "https://isc.sans.edu/rssfeed.xml",
    "Vulnerability Lab": "https://www.vulnerability-lab.com/rss/rss.php",
    "Proofpoint Threat Insight": "https://www.proofpoint.com/us/rss.xml",
    "Unit42 Palo Alto Networks": "https://unit42.paloaltonetworks.com/feed/",
    "SOCRadar Threat Intel": "https://socradar.io/feed/",
    "Google Cloud Threat Intelligence": "https://cloud.google.com/blog/topics/threat-intelligence.rss",
    "Microsoft Security": "https://www.microsoft.com/en-us/security/blog/feed/",
    "Microsoft Security Response Center": "https://msrc.microsoft.com/blog/rss/",
    "Mandiant": "https://www.mandiant.com/resources/blog/rss.xml",
    "Cisco Talos": "http://feeds.feedburner.com/feedburner/Talos",
    "CrowdStrike": "https://www.crowdstrike.com/blog/feed/"
  }
}