Cyberhound logo
Work in progress

Cyberhound

A persona-and-device tracking toolkit. It builds a fingerprint of a known target persona and confirms which of their devices are present on a network you share — with a confidence score for each.

Dual-use — authorized work only. Cyberhound profiles a known person and converges on their devices. That capability is intended solely for lawful, authorized use: red-team and pentest engagements, asset recovery, fingerprinting research, and personal-safety scenarios where you have a lawful basis. Tracking a specific person without authorization is illegal in most jurisdictions. Authorization, minimization, and audit are treated as functional requirements here, not disclaimers.

The idea

It's an inversion of Chasing-Your-Tail (CYT), a defensive counter-surveillance tool that flags the unknown devices persisting around you. Cyberhound flips the telescope: instead of asking “which unknown device keeps showing up near me?” it asks “which of my target's known devices is showing up here, and how sure am I?” The known/benign that CYT filters out becomes the signal Cyberhound selects in.

Highlights

  • Persona profiles — maintain a living fingerprint per target: the devices associated with them and the signals each device gives off.
  • Confidence convergence — accumulate observations over time and raise (or lower) the confidence that a given signal belongs to the persona.
  • Presence confirmation — on a shared network, surface a tally like “3 of 6 of the target's devices are here”, with per-device confidence and last-seen.
  • Built on CYT — reuses the proven appearance-tracking and scoring foundations of Chasing-Your-Tail, repurposed from threat detection to identity confirmation.

Status

Scaffolding and design baseline. The directory skeleton, config schema, and design docs are in place; functional code is being built in sequenced phases, several of which are gated on operator scoping and authorization decisions.

More repositories