Feature Request: Add a setting to add feed "Default Tag" as local tag instead of global tag

[Jeroen Pinoy]

Is your feature request related to a problem? Please describe.

We do source tagging for some (MISP) feeds.

Default tag is added as a global tag. This means we are violating the MISP sharing model (adding a global tag to someone else's MISP event). If we would share this event back the tag would get synced, which we don't want.

Describe the solution you'd like

Have an option in the feed config to say this tag should be added as local tag.

Describe alternatives you've considered

A different possibility would be to use analyst data relationships for this kind of thing. The benefit would be that we could set distribution for that data as well, so it gets synced and included for a group of orgs.

Additional context

Loosely related to #7328

Code of Conduct

• I agree to follow this project's Code of Conduct