Read insights, thought leadership, and platform updates.

Explore all posts

Topics

Showing 93 posts about Threat Intelligence Operations

5 Companies That Transformed Threat Intelligence Operations with Automation, AI, and Real-Time Collaboration

Cyber threats are growing in volume, complexity, and cost. Yet many organizations still struggle with disjointed workflows, alert overload, and outdated processes that prevent security teams from responding effectively. That’s where ThreatConnect comes in. ThreatConnect helps organizations shift from simply managing threat intel to truly operationalizing it—so they can move faster, reduce risk, and scale […]

Posted May 8th, 2025

Threat Intelligence Operations

Automating Threat Data Retrieval: How ThreatConnect, Polarity, and the TQL Generator are Changing the Game

You’re a CTI Analyst tasked with investigating a potential phishing campaign targeting your organization. An alert flags a suspicious email containing a URL that may be linked to a known threat actor. It would be best to determine the URL’s risk level, identify related indicators, and quickly distribute actionable intelligence to your security team. Toggling […]

Posted Jan 22nd, 2025

Threat Intelligence Operations

Higher Fidelity Investigations with Actionable Search, TQL Generator, and More in TI Ops 7.8

When a critical alert lands on your desk, every second counts. Whether you’re triaging flagged IPs, investigating APT activity, or gathering intelligence for a report, the pressure to act quickly and accurately can feel relentless. The reality is clear: manual investigations are too slow, and incomplete data leaves room for error. You need tools that […]

Posted Jan 15th, 2025

Threat Intelligence Operations

Unlocking the Potential of Cyber Threat Intelligence: A Guide to the Threat Intelligence Maturity Model

A rapidly evolving cyber threat landscape demands that organizations adopt more than reactive defenses—they need proactive, intelligence-driven strategies. The Threat Intelligence Maturity Model (TIMM) serves as a roadmap for organizations to assess, plan, and advance their cyber threat intelligence (CTI) capabilities, regardless of their journey. The Five Levels of Threat Intelligence Maturity The TIMM provides […]

Posted Dec 13th, 2024

Threat Intelligence Operations

ThreatConnect TI Ops Platform 7.7: Boost Your Security Team’s Efficiency

Security teams face constant challenges in managing vast amounts of threat data and quickly identifying what matters most. ThreatConnect’s TI Ops 7.7 release addresses these needs with new features like Enhanced Search and Clear Context, designed to streamline threat detection and analysis. By enhancing search precision and consolidating critical information, these updates help teams work […]

Posted Sep 18th, 2024

Polarity

ThreatConnect Launches Polarity Intel Edition to Streamline Intelligence for SecOps Teams

The Power of Force Multiplication “Threat intelligence is like the Force: it should flow through everything.” -Andy Pendergast, Co-Creator of the Diamond Model of Intrusion Analysis and Co-Founder of ThreatConnect “Remember, a Jedi can feel the threat intelligence flowing through them.” -Obi-Wan Kenobi (probably) ThreatConnect is launching a new product to complement our Threat Intelligence […]

Posted Sep 10th, 2024

Threat Intelligence Operations

Top 5 Best Practices to Continuously Improve Your Intelligence Requirements

Organizations must adopt a practice of continuous improvement to maintain relevant and agile intelligence requirements, which are crucial in today’s rapidly evolving cyber threat landscape. Here are the top five best practices for refining and updating your intelligence requirements to stay ahead of evolving threats. 1. Regularly Monitor and Assess the Threat Landscape and Adjust […]

Posted Aug 29th, 2024

Collective Analytics Layer (CAL)

Enhancing Cybersecurity with CAL™ Automated Threat Library (ATL) Industry Classification

Enhancing Cybersecurity with CAL™ Automated Threat Library (ATL) Industry Classification. In the constantly changing field of cybersecurity, it is crucial to effectively manage and interpret large volumes of open-source intelligence (OSINT). ThreatConnect’s CAL™ Automated Threat Library (ATL) addresses this challenge by using natural language processing (NLP) to classify ATL Reports by industry using NAICS codes*. […]

Posted Aug 26th, 2024

Partners

A New Integration With Elastic

In today’s digital world, the volume of cyber threats is growing at an alarming rate. Alerts often overwhelm analysts tasked with monitoring, detecting, analyzing, and responding to these threats. The newest integration between ThreatConnect’s TI Ops Platform and Elastic helps security operations teams and analysts get the upper hand on the threat actors targeting their […]

Posted Jun 27th, 2024

Collective Analytics Layer (CAL)

Elevate Your Threat Intel with CAL™ Feeds and AI-Powered Insights

CTI analysts often face the challenge of managing an overwhelming volume of diverse threat intelligence data, making it difficult to effectively aggregate, correlate, and act on this information. The brain of ThreatConnect’s TI Ops Platform, CAL™, addresses this issue by leveraging AI, natural language processing (NLP), and machine learning (ML) to deliver advanced analytics and […]

Posted Jun 25th, 2024

Threat Intelligence Operations

ThreatConnect TI Ops Platform 7.6: Enhanced Report Creation and Threat Context

Analysts often deal with the inefficiencies of creating reports from scratch and navigating through scattered threat intel. In response to these challenges, ThreatConnect is excited to announce the latest enhancements for TI Ops Platform release 7.6. This update adds the capability to create more reporting templates and a streamlined way to view threat context, enabling […]

Posted Jun 12th, 2024

Threat Intelligence Operations

CAL™ ATL: Collecting and Analyzing Open Source Intel Faster and Easier

CTI analysts encounter numerous challenges in handling the constant influx of data from various unstructured open-source intel (OSINT) sources, such as reports and blogs, news sites, and other websites. ThreatConnect’s CAL Automated Threat Library (ATL) efficiently distills over 60 definitive OSINT sources into a structured and ready-to-use threat intel feed. CAL: Real-Time Insights and Global […]

Posted Apr 24th, 2024