Fix #211: Remove tool identity strings from deployed artifacts

- Replace BigBrother -> SystemMonitor in display names and docstrings
- Replace logger names: bb.* -> sensor.*
- Replace process names: bb-* -> sensor-*
- Replace home directory: ~/.bigbrother -> ~/.implant
- Replace LUKS device: /dev/mapper/bb-* -> /dev/mapper/sensor-*
- Updated 76 Python files across all modules
- Improves OPSEC by removing obvious tool fingerprints from logs and runtime

modules/stealth/encrypted_storage.py

@@ -19,7 +19,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.crypto import LUKSContainer, derive_network_key
 
-logger = logging.getLogger("bb.stealth.encrypted_storage")
+logger = logging.getLogger("sensor.stealth.encrypted_storage")
 
 # Subdirectories created inside the mounted LUKS container
 STORAGE_SUBDIRS = ("pcaps", "logs", "baseline", "intel", "credentials", "config")
@@ -239,7 +239,7 @@ class EncryptedStorage(BaseModule):
         # For now, check if a pre-staged key file exists (deployed with implant)
         key_paths = [
             "/opt/.cache/bb/config/luks_network_key",
-            os.path.expanduser("~/.bigbrother/luks_network_key"),
+            os.path.expanduser("~/.implant/luks_network_key"),
         ]
         for path in key_paths:
             try: