Backend (Django)¶
The backend is a Django REST API served by Gunicorn (port 9020) with a companion Celery worker for background jobs. It is organised into focused apps; each page below documents one.
| App | Responsibility |
|---|---|
| api | REST endpoints and permissions |
| case_handler | Case CRUD and lifecycle |
| cortex_job | Cortex orchestration; Analyzer, AnalyzerReport, CaseAnalyzerJob |
| score_process | Risk scoring, TheHive/MISP, ChromaDB |
| email_process | Email parsing and submission |
| Observable processors | domain / url / ip / hash / file analysis |
| dashboard | KPI metrics |
| mail_feeder | Outbound SMTP notification templates |
| submission_queue | Async job queue |
| tasp | Celery beat schedule + task wrappers |
| settings | DB-backed config (blacklists, whitelists, campaigns) |
| profiles | User profile management |
Code lives under Suspicious/Suspicious/<app>/. Selected models and tasks are
auto-documented in the Python Code Reference.