Save threat feed articles for analysts before triage backlog

Your threat feed articles arrive untagged, causing missed indicators and slower detection. Analysts get enriched table entries to triage before morning standup.