This script enables whitelisting for intelligence items.
policy/frameworks/intel/seen/__load__.bro
policy/frameworks/intel/do_expire.bro