Turncloak: Insider Threat Risk Calculation Tool

During this Phase I Small Business Innovation Research (SBIR), Black Cape plans to develop the foundation for an advanced analytical tool, called Turncloak, that will assess the risk level of possible threat actors (PTAs). This foundation must have the ability to ingest large amounts of disparate data and store such data in a format that can be easily and autonomously analyzed for threat level by any current or future assessment algorithm. Objective 1: Develop an extract transform load (ETL) pipeline for automated and manual data ingestion. Objective 2: Implement a robust file storage solution. Objective 3: Design and develop a user interface (UI) to facilitate data management and tool use. Objective 4: Extend ETL to include additional data modalities and types. Objective 5: Survey and evaluate state-of-the-art (SOTA) analytic machine learning (ML) models for best fit in the insider threat detection use-case. Objective 6: Perform a trade study on different threat scales or metrics used by top-tier organizations. Approved for Public Release | 24-MDA-11906 (16 Sep 24)