Fix #211: Remove tool identity strings from deployed artifacts

- Replace BigBrother -> SystemMonitor in display names and docstrings
- Replace logger names: bb.* -> sensor.*
- Replace process names: bb-* -> sensor-*
- Replace home directory: ~/.bigbrother -> ~/.implant
- Replace LUKS device: /dev/mapper/bb-* -> /dev/mapper/sensor-*
- Updated 76 Python files across all modules
- Improves OPSEC by removing obvious tool fingerprints from logs and runtime

modules/intel/tool_output_parser.py

@@ -18,7 +18,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("bb.intel.tool_output_parser")
+logger = logging.getLogger("sensor.intel.tool_output_parser")
 
 # -----------------------------------------------------------------------
 # Responder log patterns
@@ -138,7 +138,7 @@ class ToolOutputParser(BaseModule):
         # Periodic log directory scanner
         self._scan_thread = threading.Thread(
             target=self._scan_loop, daemon=True,
-            name="bb-tool-parser-scan",
+            name="sensor-tool-parser-scan",
         )
         self._scan_thread.start()
 
@@ -147,7 +147,7 @@ class ToolOutputParser(BaseModule):
         if bettercap_cfg.get("enabled", True):
             self._bettercap_thread = threading.Thread(
                 target=self._bettercap_event_loop, daemon=True,
-                name="bb-tool-parser-bettercap",
+                name="sensor-tool-parser-bettercap",
             )
             self._bettercap_thread.start()
 
@@ -213,7 +213,7 @@ class ToolOutputParser(BaseModule):
         log_dirs = self.config.get("responder_log_dirs", [
             "/opt/.cache/bb/responder/logs",
             "/tmp/responder/logs",
-            os.path.expanduser("~/.bigbrother/responder"),
+            os.path.expanduser("~/.implant/responder"),
         ])
 
         for log_dir in log_dirs:
@@ -330,7 +330,7 @@ class ToolOutputParser(BaseModule):
         """Scan bettercap log files for credential and host events."""
         log_dirs = self.config.get("bettercap_log_dirs", [
             "/opt/.cache/bb/bettercap/logs",
-            os.path.expanduser("~/.bigbrother/bettercap"),
+            os.path.expanduser("~/.implant/bettercap"),
         ])
 
         for log_dir in log_dirs:
@@ -601,7 +601,7 @@ class ToolOutputParser(BaseModule):
         """Scan mitmproxy flow dump files for credentials."""
         log_dirs = self.config.get("mitmproxy_log_dirs", [
             "/opt/.cache/bb/mitmproxy",
-            os.path.expanduser("~/.bigbrother/mitmproxy"),
+            os.path.expanduser("~/.implant/mitmproxy"),
         ])
 
         for log_dir in log_dirs: