Collection and Analysis of Telemetry for CyOTE Heuristics (CATCH)

Program Document · Mon Jul 22 00:00:00 EDT 2024

OSTI ID:2405044

Honas, Alycia Brooke ^[1]

---

1. Idaho National Laboratory

The Collection and Analysis of Telemetry for CyOTE Heuristics (CATCH) provides a framework for augmenting an organization’s existing security controls with CyOTE developed analyses. CATCH collects, stores, analyzes, and creates STIX reports on anomalous data. CATCH connects the CyOTE analysis framework together with the MITRE ICS ATT&CK® patterns and highlights areas of improvement and further research. This tool is designed to enhance an organization’s security controls by providing a structured approach to collecting, storing, analyzing, and reporting anomalous data.

• Research Organization: Idaho National Laboratory (INL), Idaho Falls, ID (United States)
• Sponsoring Organization: 79
• DOE Contract Number: AC07-05ID14517
• OSTI ID: 2405044
• Report Number(s): INL/MIS-24-79492-Rev000
• Country of Publication: United States
• Language: English

Related Subjects

99 GENERAL AND MISCELLANEOUS
Anomaly Detection
CATCH
Collection and Analysis of Telemetry for CyOTE Heuristics
CyOTE
Cybersecurity for the Operational Technology Environment
Real-Time Threat Detection