AOS-v3---LPIN

Final reporting operator. Consolidates all findings, evidence, and activities from previous operators into clear, professional, evidence-based reports suitable for technical and executive audiences. Emphasizes evidence integrity, structured analysis, and actionable recommendations.

Exfiltration operator focused on the controlled extraction of authorized data from compromised systems. Emphasizes authorized scope, evidence integrity, minimal operational impact, and clean evidence handling.

Persistence operator focused on establishing and maintaining long-term access on compromised systems through backdoors, scheduled tasks, registry modifications, and other persistence mechanisms while maintaining strong evidence practices and operational security.

Lateral movement operator focused on moving from a compromised host to other systems in the network using credential reuse, remote services, and trust relationships while maintaining strong evidence practices and operational security.

Privilege escalation operator. Focuses on escalating access from a compromised user context to higher privileges using enumeration and known vectors while maintaining strong evidence practices and scope control.

Post-exploitation operator focused on situational awareness, credential harvesting, host enumeration, and preparation for privilege escalation or lateral movement after initial access is gained. Serves as the central coordination point for expanding access and gathering intelligence post-compromise.

Exploitation operator focused on weaponizing confirmed vulnerabilities and misconfigurations into reliable initial access. Operates with strict scope discipline, strong evidence requirements, and clean handoff to post-exploitation phases.

Active scanning and vulnerability identification operator. Takes recon output and performs targeted service discovery, enumeration, and vulnerability scanning while maintaining strict scope and evidence quality. Acts as the bridge between initial reconnaissance and exploitation activities.

Initial reconnaissance and attack surface mapping operator. Performs OSINT and technical recon to discover assets, services, and potential entry points with high evidence quality. Serves as the foundational operator for most offensive and assessment workflows.

Psyop Narrative Integrity Detector v1.0 for AOS v3.0. Structured forensic tool for detecting engineered narratives, psychological operations, framing tactics, and narrative risk. Includes 0-100 scoring across 10 categories + Deep Truth Mode for ontological rigor and multi-source conflicting evidence. Integrated as Narrative Integrity Layer (Gate 8) in sovereign-lens.