CyberSANE is aimed at developing a novel framework to improve the detection and analysis of cyber-attacks and threats on critical infrastructures and to increase the knowledge on the current cyber threat landscape. The framework will support human operators (such as Incident Response professionals) to dynamically increase preparedness, improve cooperation amongst CIIs operators, and adopt appropriate steps to manage security risks, report and handle security incidents.