mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
84 lines
4.6 KiB
Markdown
84 lines
4.6 KiB
Markdown
# Workflows: Social Engineering Pretext Call
|
|
|
|
## Vishing Campaign Workflow
|
|
|
|
```
|
|
┌─────────────────────────────────────────────────────────────────┐
|
|
│ VISHING CAMPAIGN WORKFLOW │
|
|
├─────────────────────────────────────────────────────────────────┤
|
|
│ │
|
|
│ 1. AUTHORIZATION & SCOPING │
|
|
│ ├── Obtain written authorization │
|
|
│ ├── Define target list (departments, roles) │
|
|
│ ├── Define boundaries (no C-suite, no threats) │
|
|
│ ├── Agree on pretext scenarios │
|
|
│ ├── Confirm call recording legality │
|
|
│ └── Establish deconfliction process │
|
|
│ │
|
|
│ 2. OSINT RECONNAISSANCE │
|
|
│ ├── Employee enumeration (LinkedIn, website) │
|
|
│ ├── Organizational structure mapping │
|
|
│ ├── Technology stack identification │
|
|
│ ├── Internal terminology and process research │
|
|
│ └── Target prioritization │
|
|
│ │
|
|
│ 3. PRETEXT DEVELOPMENT │
|
|
│ ├── Select scenario(s) per target role │
|
|
│ ├── Draft call scripts with key phrases │
|
|
│ ├── Prepare objection handling responses │
|
|
│ ├── Set up caller ID spoofing (authorized) │
|
|
│ └── Rehearse delivery │
|
|
│ │
|
|
│ 4. CALL EXECUTION │
|
|
│ ├── Execute calls according to schedule │
|
|
│ ├── Record calls (with legal authorization) │
|
|
│ ├── Document responses and disclosures │
|
|
│ ├── Note verification attempts by targets │
|
|
│ └── Track time-to-disclosure metrics │
|
|
│ │
|
|
│ 5. ANALYSIS & REPORTING │
|
|
│ ├── Calculate disclosure rates by department │
|
|
│ ├── Identify patterns (role, tenure, training) │
|
|
│ ├── Compare against industry benchmarks │
|
|
│ ├── Generate remediation recommendations │
|
|
│ └── Present findings to stakeholders │
|
|
│ │
|
|
└─────────────────────────────────────────────────────────────────┘
|
|
```
|
|
|
|
## Pretext Selection Decision Tree
|
|
|
|
```
|
|
Select Pretext Based on Target Role
|
|
│
|
|
├── IT/Technical Staff
|
|
│ ├── Vendor support call (patch emergency)
|
|
│ ├── Cloud provider security alert
|
|
│ └── Penetration test notification (meta-pretext)
|
|
│
|
|
├── Finance/Accounting
|
|
│ ├── Wire transfer verification (CEO fraud)
|
|
│ ├── Vendor payment update
|
|
│ └── Audit compliance request
|
|
│
|
|
├── HR/Recruiting
|
|
│ ├── Benefits enrollment verification
|
|
│ ├── Background check follow-up
|
|
│ └── Payroll system update
|
|
│
|
|
├── Executive Assistants
|
|
│ ├── Executive impersonation (travel issue)
|
|
│ ├── Board meeting preparation
|
|
│ └── Urgent document request
|
|
│
|
|
├── General Employees
|
|
│ ├── IT Helpdesk (password reset/VPN update)
|
|
│ ├── Facilities (badge system update)
|
|
│ └── Survey/research call
|
|
│
|
|
└── Front Desk/Reception
|
|
├── Delivery/courier pretext
|
|
├── Visitor registration
|
|
└── Employee directory request
|
|
```
|