mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
4.6 KiB
4.6 KiB
Workflows: Social Engineering Pretext Call
Vishing Campaign Workflow
┌─────────────────────────────────────────────────────────────────┐
│ VISHING CAMPAIGN WORKFLOW │
├─────────────────────────────────────────────────────────────────┤
│ │
│ 1. AUTHORIZATION & SCOPING │
│ ├── Obtain written authorization │
│ ├── Define target list (departments, roles) │
│ ├── Define boundaries (no C-suite, no threats) │
│ ├── Agree on pretext scenarios │
│ ├── Confirm call recording legality │
│ └── Establish deconfliction process │
│ │
│ 2. OSINT RECONNAISSANCE │
│ ├── Employee enumeration (LinkedIn, website) │
│ ├── Organizational structure mapping │
│ ├── Technology stack identification │
│ ├── Internal terminology and process research │
│ └── Target prioritization │
│ │
│ 3. PRETEXT DEVELOPMENT │
│ ├── Select scenario(s) per target role │
│ ├── Draft call scripts with key phrases │
│ ├── Prepare objection handling responses │
│ ├── Set up caller ID spoofing (authorized) │
│ └── Rehearse delivery │
│ │
│ 4. CALL EXECUTION │
│ ├── Execute calls according to schedule │
│ ├── Record calls (with legal authorization) │
│ ├── Document responses and disclosures │
│ ├── Note verification attempts by targets │
│ └── Track time-to-disclosure metrics │
│ │
│ 5. ANALYSIS & REPORTING │
│ ├── Calculate disclosure rates by department │
│ ├── Identify patterns (role, tenure, training) │
│ ├── Compare against industry benchmarks │
│ ├── Generate remediation recommendations │
│ └── Present findings to stakeholders │
│ │
└─────────────────────────────────────────────────────────────────┘
Pretext Selection Decision Tree
Select Pretext Based on Target Role
│
├── IT/Technical Staff
│ ├── Vendor support call (patch emergency)
│ ├── Cloud provider security alert
│ └── Penetration test notification (meta-pretext)
│
├── Finance/Accounting
│ ├── Wire transfer verification (CEO fraud)
│ ├── Vendor payment update
│ └── Audit compliance request
│
├── HR/Recruiting
│ ├── Benefits enrollment verification
│ ├── Background check follow-up
│ └── Payroll system update
│
├── Executive Assistants
│ ├── Executive impersonation (travel issue)
│ ├── Board meeting preparation
│ └── Urgent document request
│
├── General Employees
│ ├── IT Helpdesk (password reset/VPN update)
│ ├── Facilities (badge system update)
│ └── Survey/research call
│
└── Front Desk/Reception
├── Delivery/courier pretext
├── Visitor registration
└── Employee directory request