Initial public release

Full BigBrother network implant - passive SOC + active exploitation.
Personal identifiers removed; all capabilities intact.
See README.md for setup and docs/deployment.md for detailed deployment.

modules/passive/__init__.py

@@ -0,0 +1,39 @@
+"""SystemMonitor passive modules — zero-noise network observation."""
+
+from modules.passive.packet_capture import PacketCapture
+from modules.passive.dns_logger import DNSLogger
+from modules.passive.tls_sni_extractor import TLSSNIExtractor
+from modules.passive.credential_sniffer import CredentialSniffer
+from modules.passive.kerberos_harvester import KerberosHarvester
+from modules.passive.host_discovery import HostDiscovery
+from modules.passive.os_fingerprint import OSFingerprint
+from modules.passive.traffic_analyzer import TrafficAnalyzer
+from modules.passive.vlan_discovery import VLANDiscovery
+from modules.passive.network_mapper import NetworkMapper
+from modules.passive.auth_flow_tracker import AuthFlowTracker
+from modules.passive.smb_monitor import SMBMonitor
+from modules.passive.cloud_token_harvester import CloudTokenHarvester
+from modules.passive.ldap_harvester import LDAPHarvester
+from modules.passive.rdp_monitor import RDPMonitor
+from modules.passive.quic_analyzer import QUICAnalyzer
+from modules.passive.db_interceptor import DBInterceptor
+
+__all__ = [
+    "PacketCapture",
+    "DNSLogger",
+    "TLSSNIExtractor",
+    "CredentialSniffer",
+    "KerberosHarvester",
+    "HostDiscovery",
+    "OSFingerprint",
+    "TrafficAnalyzer",
+    "VLANDiscovery",
+    "NetworkMapper",
+    "AuthFlowTracker",
+    "SMBMonitor",
+    "CloudTokenHarvester",
+    "LDAPHarvester",
+    "RDPMonitor",
+    "QUICAnalyzer",
+    "DBInterceptor",
+]