add threat_intel category to integrations

[stevewritescode]

What does this PR do?

As a follow-on to elastic/package-spec#366, this PR adds new threat_intel category to the relevant integrations:

• Mimecast
• AbuseCH
• Anomali
• Cybersixgill
• MISP
• AlienVault OTX
• Recorded Future
• Threat Quotient

Checklist

• I have reviewed tips for building integrations and this pull request is aligned with them.
• I have added an entry to my package's changelog.yml file.
• I have verified that Kibana version constraints are current according to guidelines.

Related issues

Relates to elastic/kibana#135758, elastic/kibana#136208

[stevewritescode]

I'm not sure why this specific package was listed with productivity even though the other ti-* packages were not. For consistency, I removed it.

[stevewritescode]

I marked this package with the threat_intel category because it supports pulling data from the Mimecast Threat Intel Feed.

[stevewritescode]

@elastic/security-external-integrations did I miss any steps for updating the categories for 8.4? Happy to adjust the PR if needed.

[elasticmachine]

💚 Build Succeeded

the below badges are clickable and redirect to their specific view in the CI or DOCS

Expand to view the summary

Build stats

• Start Time: 2022-07-20T18:31:36.485+0000

• Duration: 21 min 22 sec

Test stats 🧪

Test	Results
Failed	0
Passed	139
Skipped	0
Total	139

🤖 GitHub comments

To re-run your PR in the CI, just comment with:

• /test : Re-trigger the build.

[elasticmachine]

🌐 Coverage report

Name	Metrics % (covered/total)	Diff
Packages	100.0% (18/18)	💚
Files	100.0% (19/19)	💚 3.012
Classes	100.0% (19/19)	💚 3.012
Methods	94.758% (235/248)	👍 5.708
Lines	86.714% (2813/3244)	👎 -3.765
Conditionals	100.0% (0/0)	💚

[efd6]

LGTM after nit.

[efd6]

Since these are marked as enhancements, they would be minor version bumps rather than patch bumps.

[stevewritescode]

Thanks @efd6! I modified the version numbers. @elastic/protections-experience would you mind giving this a once over before I merge?

[efd6]

Thanks

[PhilippeOberti]

LGTM (although not exactly sure how to test this :) )

[dhru42]

@stevewritescode you're missing ThreatQuotient in your list of TI feeds. Also just as an FYI, Mimecast isn't a full TI integration but they have some data streams that are Threat Intelligence related so good to keep on the list.

[stevewritescode]

Thanks @dhru42! I accidentally left ThreatQuotient out of the list in the PR description, though it is represented in the code changed. I updated the description to match.

I will also rebase on the recent mimecast updates before merging.