I’m currently using global context to store enriched IOC data so that when a new case arrives, I can reuse previously enriched results instead of calling enrichment integrations again.
This helps reduce API calls and speeds up investigations.
However, I’m concerned about long-term scalability:
-
Will global context size become a limitation?
-
Can this impact performance over time?
P.S. I’m aware that Data Tables can be used for persistence, but I’m intentionally trying to avoid using them in this design.
Thank you :)