Events display
Mobile Badger is designed to run in full headless mode (without monitor, and without auto-logging on local console).
However, there is a way to control its activities - it supports some LED/LCD displays:
- Bakebit NanoHat OLED (for NanoPi-NEO2 devices)
- Pimoroni Blinkt! (for Raspberry Pi devices)
Here you will find a repository containing the current list of drivers, along with their documentation.
Data exfiltration takes time, especially when run on relatively slow device, instead on a normal computer. Therefore it is crucial to know, what is actually happening with this device:
- was the attached target drive properly recognized?
- was the user drive properly recognized, decrypted, copied etc.?
- any other important events?
The easiest way to handle this, especially in the field use, is to use simple LED interface, that will show such event using multiple LED colors, eg.:
