Strip OPSEC tool identity fingerprints

Replace all sensor.* logger namespaces with __name__ (generic module
identifiers instead of discoverable 'sensor.*' prefixes).

Change hardcoded 'bb' API user to 'admin' in config and code defaults.

Change hardcoded relay_user 'bb' to 'operator' — prevents network
profiling from exposing tool identity via SSH config.

Fixes #457, #458, #459

modules/active/arp_spoof.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.active.arp_spoof")
+logger = logging.getLogger(__name__)
 
 
 class ARPSpoof(BaseModule):

modules/active/bettercap_mgr.py

@@ -22,7 +22,7 @@ from modules.base import BaseModule
 from utils.bettercap_api import BettercapAPI
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.active.bettercap_mgr")
+logger = logging.getLogger(__name__)
 
 
 class BettercapManager(BaseModule):

modules/active/dhcp_spoof.py

@@ -13,7 +13,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.active.dhcp_spoof")
+logger = logging.getLogger(__name__)
 
 
 class DHCPSpoof(BaseModule):

modules/active/dns_poison.py

@@ -14,7 +14,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.active.dns_poison")
+logger = logging.getLogger(__name__)
 
 
 class DNSPoison(BaseModule):

modules/active/evil_twin.py

@@ -25,7 +25,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.active.evil_twin")
+logger = logging.getLogger(__name__)
 
 # Default dnsmasq config for captive portal
 DNSMASQ_CONF_TEMPLATE = """interface={iface}

modules/active/ipv6_slaac.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.active.ipv6_slaac")
+logger = logging.getLogger(__name__)
 
 
 class IPv6SLAAC(BaseModule):

modules/active/mitmproxy_mgr.py

@@ -22,7 +22,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.active.mitmproxy_mgr")
+logger = logging.getLogger(__name__)
 
 # Hardware tier check — mitmproxy is too heavy for RPi Zero 2W
 SUPPORTED_TIERS = {"opi_zero3", "rpi4", "full"}

modules/active/ntlm_relay.py

@@ -20,7 +20,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.active.ntlm_relay")
+logger = logging.getLogger(__name__)
 
 # Supported relay protocols
 RELAY_PROTOCOLS = frozenset(["smb", "ldap", "ldaps", "http", "https", "mssql", "adcs"])

modules/active/responder_mgr.py

@@ -22,7 +22,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.active.responder_mgr")
+logger = logging.getLogger(__name__)
 
 # Regex for Responder hash log filenames
 HASH_FILE_PATTERN = re.compile(

modules/connectivity/ble_emergency.py

@@ -22,7 +22,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.connectivity.ble_emergency")
+logger = logging.getLogger(__name__)
 
 # Custom BLE service/characteristic UUIDs (random, non-standard)
 SERVICE_UUID = "bb000001-1337-4000-8000-000000000001"

modules/connectivity/bridge.py

@@ -22,7 +22,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.connectivity.bridge")
+logger = logging.getLogger(__name__)
 
 BRIDGE_NAME = "br0"
 WATCHDOG_INTERVAL = 5.0  # seconds between health checks

modules/connectivity/cellular_backup.py

@@ -22,7 +22,7 @@ except ImportError:
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.connectivity.cellular_backup")
+logger = logging.getLogger(__name__)
 
 # Default serial device for modem AT commands
 DEFAULT_MODEM_DEVICE = "/dev/ttyUSB2"

modules/connectivity/data_exfil.py

@@ -31,7 +31,7 @@ from modules.base import BaseModule
 from core.bus import Event
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.connectivity.data_exfil")
+logger = logging.getLogger(__name__)
 
 
 class ExfilPriority(IntEnum):

modules/connectivity/tailscale.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.connectivity.tailscale")
+logger = logging.getLogger(__name__)
 
 TAILSCALE_BIN = "/usr/bin/tailscale"
 TAILSCALED_BIN = "/usr/sbin/tailscaled"

modules/connectivity/wifi_client.py

@@ -15,7 +15,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.connectivity.wifi_client")
+logger = logging.getLogger(__name__)
 
 WPA_SUPPLICANT_BIN = "/sbin/wpa_supplicant"
 WPA_CLI_BIN = "/sbin/wpa_cli"

modules/connectivity/wireguard.py

@@ -17,7 +17,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.connectivity.wireguard")
+logger = logging.getLogger(__name__)
 
 WG_INTERFACE = "wg0"
 HEALTH_CHECK_TIMEOUT = 5  # seconds

modules/intel/change_detector.py

@@ -20,7 +20,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.intel.change_detector")
+logger = logging.getLogger(__name__)
 
 _SCHEMA = """
 CREATE TABLE IF NOT EXISTS changes (

modules/intel/credential_db.py

@@ -19,7 +19,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.intel.credential_db")
+logger = logging.getLogger(__name__)
 
 _TABLE_DDL = """
 CREATE TABLE IF NOT EXISTS credentials (

modules/intel/net_intel.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.intel.net_intel")
+logger = logging.getLogger(__name__)
 
 # Known malicious infrastructure patterns
 _KNOWN_BAD_PORTS = {

modules/intel/operator_audit.py

@@ -20,7 +20,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.intel.operator_audit")
+logger = logging.getLogger(__name__)
 
 _SCHEMA = """
 CREATE TABLE IF NOT EXISTS audit_log (

modules/intel/security_posture.py

@@ -18,7 +18,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.intel.security_posture")
+logger = logging.getLogger(__name__)
 
 _SCHEMA = """
 CREATE TABLE IF NOT EXISTS security_tools (

modules/intel/supply_chain_detect.py

@@ -17,7 +17,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.intel.supply_chain_detect")
+logger = logging.getLogger(__name__)
 
 _SCHEMA = """
 CREATE TABLE IF NOT EXISTS supply_chain (

modules/intel/tool_output_parser.py

@@ -19,7 +19,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.intel.tool_output_parser")
+logger = logging.getLogger(__name__)
 
 # -----------------------------------------------------------------------
 # Responder log patterns
@@ -372,8 +372,8 @@ class ToolOutputParser(BaseModule):
 
         api_host = self.config.get("bettercap", {}).get("host", "127.0.0.1")
         api_port = self.config.get("bettercap", {}).get("port", 8083)
-        api_user = self.config.get("bettercap", {}).get("user", "bb")
-        api_pass = self.config.get("bettercap", {}).get("password", "bb")
+        api_user = self.config.get("bettercap", {}).get("api_user", "admin")
+        api_pass = self.config.get("bettercap", {}).get("api_password", "")
 
         base_url = f"http://{api_host}:{api_port}"
         last_event_id = 0

modules/intel/topology_mapper.py

@@ -18,7 +18,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.intel.topology_mapper")
+logger = logging.getLogger(__name__)
 
 # OS family -> Graphviz fill color
 _OS_COLORS = {

modules/intel/user_timeline.py

@@ -19,7 +19,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.intel.user_timeline")
+logger = logging.getLogger(__name__)
 
 _SCHEMA = """
 CREATE TABLE IF NOT EXISTS user_events (

modules/passive/auth_flow_tracker.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.auth_flow_tracker")
+logger = logging.getLogger(__name__)
 
 # Protocol ports
 KERBEROS_PORT = 88

modules/passive/cloud_token_harvester.py

@@ -21,7 +21,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.cloud_token_harvester")
+logger = logging.getLogger(__name__)
 
 # Token regexes — compiled once
 _TOKEN_PATTERNS = {

modules/passive/credential_sniffer.py

@@ -28,7 +28,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.credential_sniffer")
+logger = logging.getLogger(__name__)
 
 # Hashcat mode mapping
 HASHCAT_MODES = {

modules/passive/db_interceptor.py

@@ -24,7 +24,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.db_interceptor")
+logger = logging.getLogger(__name__)
 
 # TDS packet types
 TDS_SQL_BATCH = 0x01

modules/passive/dns_logger.py

@@ -20,7 +20,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.dns_logger")
+logger = logging.getLogger(__name__)
 
 # Well-known DoH resolver IPs
 DOH_RESOLVERS = frozenset([

modules/passive/host_discovery.py

@@ -25,7 +25,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.host_discovery")
+logger = logging.getLogger(__name__)
 
 
 class HostDiscovery(BaseModule):

modules/passive/kerberos_harvester.py

@@ -22,7 +22,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.kerberos_harvester")
+logger = logging.getLogger(__name__)
 
 # Kerberos message types (application tags)
 KRB_AS_REQ = 10

modules/passive/ldap_harvester.py

@@ -21,7 +21,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.ldap_harvester")
+logger = logging.getLogger(__name__)
 
 # LDAP protocol tags
 TAG_SEQUENCE = 0x30

modules/passive/network_mapper.py

@@ -20,7 +20,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.network_mapper")
+logger = logging.getLogger(__name__)
 
 TCP_PROTO = 6
 UDP_PROTO = 17

modules/passive/os_fingerprint.py

@@ -25,7 +25,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.os_fingerprint")
+logger = logging.getLogger(__name__)
 
 # p0f-style TCP signature database (built-in fallback)
 # Format: (ttl_range, window_size, df, mss_range, sack, timestamps) -> (os_family, os_version)

modules/passive/packet_capture.py

@@ -25,7 +25,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.networking import detect_interface_with_retry
 
-logger = logging.getLogger("sensor.passive.packet_capture")
+logger = logging.getLogger(__name__)
 
 
 class PacketCapture(BaseModule):

modules/passive/quic_analyzer.py

@@ -21,7 +21,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.quic_analyzer")
+logger = logging.getLogger(__name__)
 
 # QUIC constants
 QUIC_LONG_HEADER_BIT = 0x80

modules/passive/rdp_monitor.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.rdp_monitor")
+logger = logging.getLogger(__name__)
 
 # NTLM signature for CredSSP extraction
 NTLMSSP_SIGNATURE = b'NTLMSSP\x00'

modules/passive/smb_monitor.py

@@ -20,7 +20,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.smb_monitor")
+logger = logging.getLogger(__name__)
 
 # SMB2 command IDs
 SMB2_NEGOTIATE = 0x0000

modules/passive/tls_sni_extractor.py

@@ -20,7 +20,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.tls_sni_extractor")
+logger = logging.getLogger(__name__)
 
 # TLS record types
 TLS_HANDSHAKE = 22

modules/passive/traffic_analyzer.py

@@ -25,7 +25,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.traffic_analyzer")
+logger = logging.getLogger(__name__)
 
 # Protocol number to name mapping
 PROTO_NAMES = {

modules/passive/vlan_discovery.py

@@ -17,7 +17,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.vlan_discovery")
+logger = logging.getLogger(__name__)
 
 # Ethertypes and protocol IDs
 ETHERTYPE_8021Q = 0x8100

modules/stealth/anti_forensics.py

@@ -19,7 +19,7 @@ from utils.stealth import (
     _get_os_install_time,
 )
 
-logger = logging.getLogger("sensor.stealth.anti_forensics")
+logger = logging.getLogger(__name__)
 
 # SystemMonitor install root (default; overridden by config)
 BB_ROOT = "/opt/.cache/bb"

modules/stealth/encrypted_storage.py

@@ -19,7 +19,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.crypto import LUKSContainer, derive_network_key
 
-logger = logging.getLogger("sensor.stealth.encrypted_storage")
+logger = logging.getLogger(__name__)
 
 # Subdirectories created inside the mounted LUKS container
 STORAGE_SUBDIRS = ("pcaps", "logs", "baseline", "intel", "credentials", "config")

modules/stealth/ids_tester.py

@@ -12,7 +12,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.stealth.ids_tester")
+logger = logging.getLogger(__name__)
 
 # Detection risk levels
 RISK_LOW = "LOW"

modules/stealth/ja3_spoofer.py

@@ -15,7 +15,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.stealth.ja3_spoofer")
+logger = logging.getLogger(__name__)
 
 # Built-in JA3 fingerprint profiles (fallback if data/ja3_fingerprints.db absent)
 # Format: {name: {ja3_hash, cipher_suites, extensions, description}}

modules/stealth/lkm_rootkit.py

@@ -12,7 +12,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.resource import get_hardware_tier, TIER_GENERIC
 
-logger = logging.getLogger("sensor.stealth.lkm_rootkit")
+logger = logging.getLogger(__name__)
 
 LKM_TEMPLATE_DIR = "templates/lkm"
 LKM_SOURCE = "bb_hide.c"

modules/stealth/log_suppression.py

@@ -15,7 +15,7 @@ from typing import Dict, List
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.stealth.log_suppression")
+logger = logging.getLogger(__name__)
 
 RSYSLOG_CONF = "/etc/rsyslog.d/01-bb-suppress.conf"
 JOURNALD_CONF_DIR = "/etc/systemd/journald.conf.d"

modules/stealth/mac_manager.py

@@ -26,7 +26,7 @@ from utils.networking import (
 )
 from utils.stealth import set_sysctl, set_tcp_timestamps, set_tcp_window, set_ttl
 
-logger = logging.getLogger("sensor.stealth.mac_manager")
+logger = logging.getLogger(__name__)
 
 # Category preferences per network type
 _BUSINESS_CATEGORIES = ("printers", "network", "smart_home")

modules/stealth/overlayfs_manager.py

@@ -13,7 +13,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.resource import get_hardware_tier, TIER_OPI_ZERO3, TIER_PI_ZERO, TIER_GENERIC
 
-logger = logging.getLogger("sensor.stealth.overlayfs_manager")
+logger = logging.getLogger(__name__)
 
 # Default overlay paths
 OVERLAY_BASE = "/opt/.cache/bb/overlay"

modules/stealth/process_disguise.py

@@ -16,7 +16,7 @@ from typing import Dict, Optional
 from modules.base import BaseModule
 from utils.stealth import rename_process, spoof_cmdline
 
-logger = logging.getLogger("sensor.stealth.process_disguise")
+logger = logging.getLogger(__name__)
 
 
 class ProcessDisguise(BaseModule):

modules/stealth/tmpfs_manager.py

@@ -16,7 +16,7 @@ from typing import Dict, List, Optional, Tuple
 from modules.base import BaseModule
 from utils.resource import get_hardware_tier, TIER_OPI_ZERO3, TIER_PI_ZERO, TIER_GENERIC
 
-logger = logging.getLogger("sensor.stealth.tmpfs_manager")
+logger = logging.getLogger(__name__)
 
 # Default tmpfs size limits per tier (MB)
 _TIER_TMPFS_LIMITS = {

modules/stealth/traffic_mimicry.py

@@ -14,7 +14,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.stealth.traffic_mimicry")
+logger = logging.getLogger(__name__)
 
 PHASE_BASELINE = "baseline"
 PHASE_SHAPING = "shaping"

modules/stealth/watchdog.py

@@ -17,7 +17,7 @@ from modules.base import BaseModule
 from core.bus import Event
 from utils.resource import get_process_resources
 
-logger = logging.getLogger("sensor.stealth.watchdog")
+logger = logging.getLogger(__name__)
 
 # OOM priority assignments by module type
 _OOM_PRIORITIES = {