Design

Goals

  • SCOT should require minimal training to use and understand
  • SCOT should improve the effectiveness and efficiency of the IR analyst
  • SCOT should reward the user for using it by helping solve tedious problems
  • SCOT should be easy to maintain and resilient.
  • SCOT should be available to Windows, MacOS, and Linux users.
  • SCOT should not add burdens to the analyst if at all possible.

Architecture

SCOT 4 has been designed from the start to be run in a collection of containers. We recommend Kubernetes to orchestrate this collection.

Tech Stack

Orchestration

  • k3s or other Kubernetes platform

Database

SCOT supports using the following databases:

  • MySQL
  • Postgres
  • SQLite
  • MS-SQL

Web Server

  • Apache
  • Uvicorn

Web Framework

  • FastApi

UI Framework

  • VueJS

Other Components

  • Airflow
  • Mojolicious / Minion