Sentinel

Cross-platform command-line scanner (Windows, Linux, macOS) that detects covert surveillance software such as keyloggers, stalkerware, RATs and abused RMM tooling using a catalogue of YAML detection signatures mapped to MITRE ATT&CK. It supports forensic offline scans, differential snapshots and a personal-safety mode for at-risk users, and can quarantine findings in a dry-run.