There is a module called 'Discovery Methods' in Threat Intelligence > Administration application menu. It has a list of demo records for the 'Discovery Method' table (sn_ti_discovery_method). What is the functionality of this table?
'Discovery Method' (sn_ti_discovery_method) table was initially build to support STIX, Link: http://stixproject.github.io/data-model/1.1.1/incident/IncidentType/.
But currently this is not being used. Since this module is not being used it is safe to hide the module.