This article helps you providing steps to install and run the FireHOL Checker App in Trisul Network Analytics.

Create a high priority alert for block listed IPs(Level 1) and Low Level Priority alert for Malicious Ips(level 3),Shift to level 1 if significant data transfer occurs.