Fix #211: Remove tool identity strings from deployed artifacts

- Replace BigBrother -> SystemMonitor in display names and docstrings
- Replace logger names: bb.* -> sensor.*
- Replace process names: bb-* -> sensor-*
- Replace home directory: ~/.bigbrother -> ~/.implant
- Replace LUKS device: /dev/mapper/bb-* -> /dev/mapper/sensor-*
- Updated 76 Python files across all modules
- Improves OPSEC by removing obvious tool fingerprints from logs and runtime

modules/active/__init__.py

@@ -1,4 +1,4 @@
-"""BigBrother active modules — MITM, spoofing, and interception."""
+"""SystemMonitor active modules — MITM, spoofing, and interception."""
 
 from modules.active.bettercap_mgr import BettercapManager
 from modules.active.arp_spoof import ARPSpoof

modules/active/arp_spoof.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("bb.active.arp_spoof")
+logger = logging.getLogger("sensor.active.arp_spoof")
 
 
 class ARPSpoof(BaseModule):

modules/active/bettercap_mgr.py

@@ -21,7 +21,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.bettercap_api import BettercapAPI
 
-logger = logging.getLogger("bb.active.bettercap_mgr")
+logger = logging.getLogger("sensor.active.bettercap_mgr")
 
 
 class BettercapManager(BaseModule):
@@ -96,13 +96,13 @@ class BettercapManager(BaseModule):
 
         # Health monitoring thread
         self._health_thread = threading.Thread(
-            target=self._health_loop, daemon=True, name="bb-bcap-health"
+            target=self._health_loop, daemon=True, name="sensor-bcap-health"
         )
         self._health_thread.start()
 
         # Event stream parser thread
         self._event_thread = threading.Thread(
-            target=self._event_loop, daemon=True, name="bb-bcap-events"
+            target=self._event_loop, daemon=True, name="sensor-bcap-events"
         )
         self._event_thread.start()
 

modules/active/dhcp_spoof.py

@@ -13,7 +13,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("bb.active.dhcp_spoof")
+logger = logging.getLogger("sensor.active.dhcp_spoof")
 
 
 class DHCPSpoof(BaseModule):

modules/active/dns_poison.py

@@ -14,7 +14,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("bb.active.dns_poison")
+logger = logging.getLogger("sensor.active.dns_poison")
 
 
 class DNSPoison(BaseModule):

modules/active/evil_twin.py

@@ -24,7 +24,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("bb.active.evil_twin")
+logger = logging.getLogger("sensor.active.evil_twin")
 
 # Default dnsmasq config for captive portal
 DNSMASQ_CONF_TEMPLATE = """interface={iface}
@@ -512,7 +512,7 @@ class EvilTwin(BaseModule):
         self._portal_thread = threading.Thread(
             target=self._portal_server.serve_forever,
             daemon=True,
-            name="bb-captive-portal",
+            name="sensor-captive-portal",
         )
         self._portal_thread.start()
         logger.info("Captive portal serving on port %d", self._portal_port)

modules/active/ipv6_slaac.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("bb.active.ipv6_slaac")
+logger = logging.getLogger("sensor.active.ipv6_slaac")
 
 
 class IPv6SLAAC(BaseModule):
@@ -173,7 +173,7 @@ class IPv6SLAAC(BaseModule):
 
             # Start output monitoring thread
             self._mitm6_thread = threading.Thread(
-                target=self._monitor_mitm6, daemon=True, name="bb-mitm6-monitor"
+                target=self._monitor_mitm6, daemon=True, name="sensor-mitm6-monitor"
             )
             self._mitm6_thread.start()
 

modules/active/mitmproxy_mgr.py

@@ -21,7 +21,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("bb.active.mitmproxy_mgr")
+logger = logging.getLogger("sensor.active.mitmproxy_mgr")
 
 # Hardware tier check — mitmproxy is too heavy for RPi Zero 2W
 SUPPORTED_TIERS = {"opi_zero3", "rpi4", "full"}
@@ -195,7 +195,7 @@ class MitmproxyManager(BaseModule):
 
             # Start output monitoring
             self._monitor_thread = threading.Thread(
-                target=self._monitor_output, daemon=True, name="bb-mitmproxy-monitor"
+                target=self._monitor_output, daemon=True, name="sensor-mitmproxy-monitor"
             )
             self._monitor_thread.start()
 

modules/active/ntlm_relay.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("bb.active.ntlm_relay")
+logger = logging.getLogger("sensor.active.ntlm_relay")
 
 # Supported relay protocols
 RELAY_PROTOCOLS = frozenset(["smb", "ldap", "ldaps", "http", "https", "mssql", "adcs"])
@@ -179,7 +179,7 @@ class NTLMRelay(BaseModule):
 
             # Start output monitoring
             self._output_thread = threading.Thread(
-                target=self._monitor_output, daemon=True, name="bb-ntlmrelay-monitor"
+                target=self._monitor_output, daemon=True, name="sensor-ntlmrelay-monitor"
             )
             self._output_thread.start()
 

modules/active/responder_mgr.py

@@ -21,7 +21,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("bb.active.responder_mgr")
+logger = logging.getLogger("sensor.active.responder_mgr")
 
 # Regex for Responder hash log filenames
 HASH_FILE_PATTERN = re.compile(
@@ -195,7 +195,7 @@ class ResponderManager(BaseModule):
 
             # Start hash file monitoring thread
             self._hash_thread = threading.Thread(
-                target=self._hash_monitor_loop, daemon=True, name="bb-responder-hashes"
+                target=self._hash_monitor_loop, daemon=True, name="sensor-responder-hashes"
             )
             self._hash_thread.start()