This adds a proper documentation on how and when slips queries the APIS of urlhaus, spamhaus and cirl, in the threat_intelligence module.

[Sekhar-Kumar-Dash]

Fixes Issue #499

Changes proposed

I have changed the documentation of Threat intelligence module

Check List (Check all the applicable boxes)

• My code follows the code style of this project.
• My change requires changes to the documentation.
• I have updated the documentation accordingly.
• All new and existing tests passed.
• This PR does not contain plagiarized content.
• The title of my pull request is a short description of the requested changes.

Screenshots

Note to reviewers

[eldraco]

@Sekhar-Kumar-Dash im not sure where the 'CIRCL.LU API.log' comes from but there is no API.log file, and also it is not obtained from Zeek. Not sure what you wanted to say, but can you fix?
Also please put the names of the servies queried as headings not normal text. Thanks

[Sekhar-Kumar-Dash]

@Sekhar-Kumar-Dash im not sure where the 'CIRCL.LU API.log' comes from but there is no API.log file, and also it is not obtained from Zeek. Not sure what you wanted to say, but can you fix? Also please put the names of the servies queried as headings not normal text. Thanks

@eldraco Sorry, I have mistaken it with something else. I have made the fixes, please check.