n0mad1k
f959ef89cd
Complete rewrite of BIGBROTHER_DESIGN.md with new design philosophy: - Removed autonomous decision engine, state machine, hard scope enforcement - Removed lateral movement automation, tool wrappers, attack chain recipes - Removed push notifications, automated attack chaining, OT lockout - Added 8 new passive surveillance modules: DNS logger, TLS SNI extractor, network relationship mapper, auth flow tracker, SMB file access monitor, VoIP/SIP metadata capture, print job interception, email sniffer - Added 4 new active modules: HTTP transaction logger, file extractor, JS/HTML injection, mitmproxy integration - Added per-user activity timeline intelligence module - Pre-installed tools section (nmap, Certipy, Impacket, BloodHound, CrackMapExec, Chisel, Ligolo-ng, etc.) - installed not wrapped - Simplified to 5 implementation phases from 10 - Operator makes all decisions, no autonomous behavior