diff --git a/public/pages/CreateDetector/components/ConfigureFieldMapping/containers/ConfigureFieldMapping.tsx b/public/pages/CreateDetector/components/ConfigureFieldMapping/containers/ConfigureFieldMapping.tsx
index 4561009c3..16a9e178b 100644
--- a/public/pages/CreateDetector/components/ConfigureFieldMapping/containers/ConfigureFieldMapping.tsx
+++ b/public/pages/CreateDetector/components/ConfigureFieldMapping/containers/ConfigureFieldMapping.tsx
@@ -276,9 +276,14 @@ export default class ConfigureFieldMapping extends Component<
             mappingsView.response.properties[ruleFieldName].path;
         });
         let threatIntelFeedFields = new Set();
-        mappingsView.response.threat_intel_field_aliases?.forEach(({ fields }) => {
-          fields.forEach((field) => threatIntelFeedFields.add(field));
-        });
+
+        // Only if threat_intel is enabled, we want to show the relevant fields for mapping
+        if (this.state.detector.threat_intel_enabled) {
+          mappingsView.response.threat_intel_field_aliases?.forEach(({ fields }) => {
+            fields.forEach((field) => threatIntelFeedFields.add(field));
+          });
+        }
+
         mappingsView.response.unmapped_field_aliases?.forEach((ruleFieldName) => {
           if (
             !ruleFieldsForEnabledRules.has(ruleFieldName) &&