Strip OPSEC tool identity fingerprints

Replace all sensor.* logger namespaces with __name__ (generic module
identifiers instead of discoverable 'sensor.*' prefixes).

Change hardcoded 'bb' API user to 'admin' in config and code defaults.

Change hardcoded relay_user 'bb' to 'operator' — prevents network
profiling from exposing tool identity via SSH config.

Fixes #457, #458, #459

modules/passive/auth_flow_tracker.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.auth_flow_tracker")
+logger = logging.getLogger(__name__)
 
 # Protocol ports
 KERBEROS_PORT = 88

modules/passive/cloud_token_harvester.py

@@ -21,7 +21,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.cloud_token_harvester")
+logger = logging.getLogger(__name__)
 
 # Token regexes — compiled once
 _TOKEN_PATTERNS = {

modules/passive/credential_sniffer.py

@@ -28,7 +28,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.credential_sniffer")
+logger = logging.getLogger(__name__)
 
 # Hashcat mode mapping
 HASHCAT_MODES = {

modules/passive/db_interceptor.py

@@ -24,7 +24,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.db_interceptor")
+logger = logging.getLogger(__name__)
 
 # TDS packet types
 TDS_SQL_BATCH = 0x01

modules/passive/dns_logger.py

@@ -20,7 +20,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.dns_logger")
+logger = logging.getLogger(__name__)
 
 # Well-known DoH resolver IPs
 DOH_RESOLVERS = frozenset([

modules/passive/host_discovery.py

@@ -25,7 +25,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.host_discovery")
+logger = logging.getLogger(__name__)
 
 
 class HostDiscovery(BaseModule):

modules/passive/kerberos_harvester.py

@@ -22,7 +22,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.kerberos_harvester")
+logger = logging.getLogger(__name__)
 
 # Kerberos message types (application tags)
 KRB_AS_REQ = 10

modules/passive/ldap_harvester.py

@@ -21,7 +21,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.ldap_harvester")
+logger = logging.getLogger(__name__)
 
 # LDAP protocol tags
 TAG_SEQUENCE = 0x30

modules/passive/network_mapper.py

@@ -20,7 +20,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.network_mapper")
+logger = logging.getLogger(__name__)
 
 TCP_PROTO = 6
 UDP_PROTO = 17

modules/passive/os_fingerprint.py

@@ -25,7 +25,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.os_fingerprint")
+logger = logging.getLogger(__name__)
 
 # p0f-style TCP signature database (built-in fallback)
 # Format: (ttl_range, window_size, df, mss_range, sack, timestamps) -> (os_family, os_version)

modules/passive/packet_capture.py

@@ -25,7 +25,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.networking import detect_interface_with_retry
 
-logger = logging.getLogger("sensor.passive.packet_capture")
+logger = logging.getLogger(__name__)
 
 
 class PacketCapture(BaseModule):

modules/passive/quic_analyzer.py

@@ -21,7 +21,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.quic_analyzer")
+logger = logging.getLogger(__name__)
 
 # QUIC constants
 QUIC_LONG_HEADER_BIT = 0x80

modules/passive/rdp_monitor.py

@@ -19,7 +19,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.rdp_monitor")
+logger = logging.getLogger(__name__)
 
 # NTLM signature for CredSSP extraction
 NTLMSSP_SIGNATURE = b'NTLMSSP\x00'

modules/passive/smb_monitor.py

@@ -20,7 +20,7 @@ from typing import Optional
 from modules.base import BaseModule
 from utils.credential_encryption import emit_credential_found
 
-logger = logging.getLogger("sensor.passive.smb_monitor")
+logger = logging.getLogger(__name__)
 
 # SMB2 command IDs
 SMB2_NEGOTIATE = 0x0000

modules/passive/tls_sni_extractor.py

@@ -20,7 +20,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.tls_sni_extractor")
+logger = logging.getLogger(__name__)
 
 # TLS record types
 TLS_HANDSHAKE = 22

modules/passive/traffic_analyzer.py

@@ -25,7 +25,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.traffic_analyzer")
+logger = logging.getLogger(__name__)
 
 # Protocol number to name mapping
 PROTO_NAMES = {

modules/passive/vlan_discovery.py

@@ -17,7 +17,7 @@ from typing import Optional
 
 from modules.base import BaseModule
 
-logger = logging.getLogger("sensor.passive.vlan_discovery")
+logger = logging.getLogger(__name__)
 
 # Ethertypes and protocol IDs
 ETHERTYPE_8021Q = 0x8100