n0mad1k 813e224b03 v4.0: Shadow SOC framing — Zeek/Suricata/RITA offline analysis, innocuous MAC profiles, operator workstation as SOC analysis brain

2026-03-17 15:28:15 -04:00

BIGBROTHER_DESIGN.md

v4.0: Shadow SOC framing — Zeek/Suricata/RITA offline analysis, innocuous MAC profiles, operator workstation as SOC analysis brain

2026-03-17 15:28:15 -04:00

OPERATIONAL_WORKFLOW.md

Full PCAP on all tiers — no headers-only, no tiered retention. 128GB+ with zstd-19 handles it.

2026-03-17 12:09:22 -04:00

S

Description

Network drop implant — passive SOC + active exploitation. Deploy on any Debian host.

4.3 MiB

Languages

Python 89.2%

Shell 8.5%

HTML 1.1%

C 0.9%

Jinja 0.3%