Contents x
CAL
12 Articles  in this category
  • Print
  • Dark
    Light
Contents

CAL

Contains articles related to ThreatConnect CAL.
12 Articles in this category
  • Dark
    Light

AI Exploited-Vulnerability Analyzer

This article describes how the AI Exploited-Vulnerability Analyzer uses Tags and focused AI summaries to enrich Reports on zero-day and exploited vulnerabilities in the CAL Automated Threat Library Source.
Updated on : 16 Dec 2025

Automated Detection-Signature Extraction

This article describes CAL Doc Analysis Service’s Automated Detection Signature Extraction. It lists the rule types and metadata the feature processes and explains how CAL ATL extracts detection signatures as Signature Groups in ThreatConnect.
Updated on : 16 Dec 2025

CAL Automated Threat Library (ATL)

This article describes the CAL Automated Threat Library (ATL) in ThreatConnect, a data source that is an evolution of the Technical Blogs and Reports (TBR) Source.
Updated on : 16 Dec 2025

CAL Automated Threat Library (ATL) Supported Blogs

This article lists the blogs from which ThreatConnect's CAL Automated Threat Library (ATL) sources its data.
Updated on : 16 Dec 2025

CAL Classifiers

This article explains what CAL Classifiers are, describes how to view an Indicator’s CAL Classifiers in ThreatConnect and Polarity, and defines all available CAL Classifiers.
Updated on : 16 Dec 2025

CAL Doc Analysis Service

This article describes the features of the CAL Doc Analysis Service, where they exist in the ThreatConnect platform, and how they handle data.
Updated on : 16 Dec 2025

CAL Global Threat Score

This article describes the CAL Global Threat Score to help customers using ThreatConnect, Polarity, and Dataminr Pulse understand how the CAL Global Threat Score works and how to interpret it within cyber threat intelligence workflows.
Updated on : 16 Dec 2025

CAL Indicator Enrichments

This article describes how CAL enriches Indicators with global intelligence, metadata, and analytics derived from data sources such as customer-available feeds, enrichment-only feeds, data-driven classifiers, and known-good intelligence.
Updated on : 16 Dec 2025

CAL Safelist and Known Good Indicators

This article describes the CAL Safelist & “known good” label for Indicators in ThreatConnect & Polarity. It discusses how to identify CAL Safelist & “known good” Indicators & how being on the CAL Safelist affects Indicators in TC & Polarity.
Updated on : 16 Dec 2025

NAICS AI Industry Classification

This article describes NAICS AI industry classification, which applies Tags representing NAICS sectors to CAL ATL Reports and objects imported by the ThreatConnect Doc Analysis Playbook App and provides NAICS-specific IR keyword suggestions.
Updated on : 16 Dec 2025

ThreatAssess and CAL

This article provides an overview of ThreatAssess and CAL metrics for Indicators and how to view these metrics in ThreatConnect.
Updated on : 16 Dec 2025

What Can CAL Do For You?

This article describes reputation, Classifiers, and contextual fields in ThreatConnect CAL and provides simple, intermediate, and advanced use cases for each.
Updated on : 16 Dec 2025
Company
Sales and Support
Follow Us
© 2012–2025 ThreatConnect, Inc. All Rights Reserved.