ghost
40 lines
1.1 KiB
Markdown
Executable File
40 lines
1.1 KiB
Markdown
Executable File
# OPSEC Checklist
|
|
|
|
## Pre-Session Setup
|
|
- [ ] Fresh VM snapshot taken
|
|
- [ ] MAC address randomized: `randomize-mac`
|
|
- [ ] System timezone set appropriately
|
|
- [ ] DNS configured for privacy
|
|
- [ ] Verify no personal accounts logged in
|
|
- [ ] Disable WiFi/Bluetooth if not needed
|
|
- [ ] Configure VPN/proxy settings
|
|
- [ ] Test kill switches
|
|
|
|
## During Session
|
|
- [ ] Use workspace isolation (separate VM/container)
|
|
- [ ] All traffic through VPN/Tor
|
|
- [ ] Monitor connections: `opsec-monitor`
|
|
- [ ] Use encrypted communications
|
|
- [ ] No personal browsing/email
|
|
- [ ] Regular history clearing
|
|
- [ ] Avoid saving sensitive data locally
|
|
- [ ] Use in-memory tools when possible
|
|
|
|
## Post-Session
|
|
- [ ] Export necessary data
|
|
- [ ] Clear all logs: `clear-logs`
|
|
- [ ] Clear shell history: `clear-history`
|
|
- [ ] Wipe free space
|
|
- [ ] Secure delete files: `shred-file <files>`
|
|
- [ ] Revert to clean VM snapshot
|
|
|
|
## Emergency Procedures
|
|
- [ ] Kill network connections
|
|
- [ ] Emergency wipe if necessary
|
|
|
|
## Communication OPSEC
|
|
- [ ] Use encrypted channels
|
|
- [ ] Avoid real names/identifiers
|
|
- [ ] Use dedicated accounts
|
|
- [ ] Regular key rotation
|