CATCH is designed to enhance an organization’s security controls by providing a structured approach to collecting, storing, analyzing, and reporting anomalous data. This framework capitalizes on two key toolsets:

1. Collection Engines: These are specialized modules designed for gathering telemetry data from diverse sources.

2. Analysis Modules: Once data is collected, these modules sift through the information to detect patterns that might indicate a cyber attack. They rely heavily on the collected telemetry data, leveraging it to identify potential threats. (OSTI PID No. TBD)