Threat Reports

A report is a list of indicators that keeps matching: backward across everything you already hold, and forward across everything that arrives next.

That property is why importing a report beats searching it once, and why writing your own is how an investigation turns into standing coverage.