Unpopular opinion: The 'Anomali Community' threat feeds are mostly noise.

Everyone's raving about the free threat intel from the Anomali Community. Used it for six months.

My take: it's mostly junk data. The signal-to-noise ratio is terrible. We spent more time tuning out false positives and irrelevant low-tier indicators than we saved.

* How many of you are actually running these feeds in production without heavy filtering?
* What's the real cost when you factor in the analyst hours wasted sifting through it?
* Bet the vendor loves this "community" – hooks you on the platform, then you have to buy their curated feeds to get anything usable.

Am I the only one who thinks the free stuff is just a lead-gen tool for their sales team?