diff --git a/x-pack/plugins/security_solution/common/cti/constants.ts b/x-pack/plugins/security_solution/common/cti/constants.ts
index e63385a15062f..b33541c5057d8 100644
--- a/x-pack/plugins/security_solution/common/cti/constants.ts
+++ b/x-pack/plugins/security_solution/common/cti/constants.ts
@@ -59,11 +59,13 @@ export const DEFAULT_EVENT_ENRICHMENT_FROM = 'now-30d';
 export const DEFAULT_EVENT_ENRICHMENT_TO = 'now';
 
 export const CTI_DATASET_KEY_MAP: { [key: string]: string } = {
-  'Abuse URL': 'ti_abusech.url',
-  'Abuse Malware': 'ti_abusech.malware',
-  'Malware Bazaar': 'ti_abusech.malwarebazaar',
+  'AbuseCH URL': 'ti_abusech.url',
+  'AbuseCH Malware': 'ti_abusech.malware',
+  'AbuseCH MalwareBazaar': 'ti_abusech.malwarebazaar',
   'AlienVault OTX': 'ti_otx.threat',
   'Anomali Limo': 'ti_anomali.limo',
-  'Anomali ThreatStream': 'ti_anomali.threatstream',
+  'Anomali Threatstream': 'ti_anomali.threatstream',
   MISP: 'ti_misp.threat',
+  ThreatQuotient: 'ti_threatq.threat',
+  Cybersixgill: 'ti_cybersixgill.threat',
 };