Counter-Surveillance · TSCM · Digital Hunt
Wireless counter-surveillance and digital hunt
TALA fuses Wi-Fi, Bluetooth and BLE, and wideband software-defined radio with GNSS and direction finding to detect, correlate, and geolocate the devices operating around a person, vehicle, or facility. Passive by default, operator-controlled, and delivered on field hardware.
Operating Modes
One collection stack, two operator workflows
A protective posture that runs while you move, and an offensive posture keyed to a watchlist.
Establish who is moving with you
Fans out every passive sensor to characterize the devices and vehicles around a protected party. TPMS resolves trailing vehicles against a curated sensor reference set; BLE surfaces planted trackers (AirTag, Find My, Tile, SmartTag, Chipolo); Wi-Fi fingerprinting and camera awareness flag co-traveling devices and fixed surveillance. A glance-safe HUD keeps it usable at speed, with automatic start once the vehicle is in motion.
Cue on a known selector
The same collection stack keyed to a person and facility target deck. A Wi-Fi MAC hit, a tracked selector such as a Bluetooth address, drone Remote ID, or TPMS sensor confirmed across multiple RF planes, or entry into a facility sector raises a discrete audible alert and HUD banner, and can hand off to direction finding for closure.
Detection Model
Proximity is not the signal. The signal is persistence through spatial decorrelation.
A lone tracker on one leg of a route is noise. The same indicator surviving your turns, stops, and separate trips is a detection. TALA digitizes established counter-surveillance tradecraft, scoring persistence with a sequential probability ratio test instead of alerting on every nearby device.
Geolocation
The target never shares its position. TALA derives it from yours.
As you move, TALA turns signal strength into range and multilaterates a position from readings taken at several separated points, returning a location and a confidence radius that tightens the more you circle the target. A coherent multi-channel SDR array adds a live compass bearing, and indoors with no GPS fix, TALA can trilaterate your own position from the access points around you.
Multi-Modal Collection
Three collection planes, one operator picture
Physical-layer collection fused with geospatial and optical context on a single console.
Wi-Fi / 802.11
Kismet-backed passive discovery of access points and clients, probe and handshake analysis, and MAC-randomization-resistant device fingerprinting.
Bluetooth / BLE
BlueZ scanning and GATT interrogation with tracker intelligence, Apple Continuity decode, and RPA/IRK de-randomization.
Wideband RF / SDR
Receive-only decoding of ADS-B and UAT aircraft, AIS vessels, ISM telemetry, TPMS, POCSAG pagers, DMR and P25 voice, and DJI DroneID, with broadcast Remote ID picked up from the Wi-Fi and Bluetooth scanners. rtl-sdr through KrakenSDR, USRP, and bladeRF.
Direction Finding
Wi-Fi, Bluetooth, and coherent multi-channel SDR bearing and DOA, with RSSI-to-distance and moving-node multilateration that fixes a target as you move.
GNSS & Positioning
gpsd position and speed for the tactical plot and drive-mode auto-start, with a GNSS-band jamming check and an access-point fallback that fixes your own position when there is no GPS.
Camera Awareness
Detection of fixed surveillance infrastructure, correlated onto the tactical map alongside the RF picture.
Detection & Analysis
From raw collection to a geolocated fix
Correlation, targeting, geolocation, and standards-mapped reporting from one field console.
Follower Detection
A sequential probability ratio test scores persistence through spatially decorrelated legs, confirming a tail through turns, stops, and separate trips rather than proximity.
Cross-Modal Fusion
A single entity observed across two or more collection planes inside a five-minute window escalates to a high-confidence cross-modal correlation alert.
TSCM
A 21-item technical-surveillance-countermeasures class: covert audio and video transmitters, cellular bugs, IMSI catchers, planted trackers, rogue APs, hidden IP cameras, and exfiltration beacons.
Target Deck
Person and facility watchlists with typed selectors, relationships, sighting logs, and a person-to-facility graph across 15 facility subtypes.
Pattern-of-Life
Recurring TPMS, BLE, and Wi-Fi sightings at collection sites build presence and re-identification history over time, alongside per-vehicle sighting tracks and a WiGLE-based beddown prediction.
3D Area-of-Interest Mapping
A 3D mission-planning map with offline-capable OSM building-volume overlays and an optional streamed photoreal city mesh.
Findings Catalog
118 findings across Wi-Fi, Bluetooth, RF, and TSCM, each with CVSS scoring, MITRE ATT&CK mapping, evidence templates, and standards references.
Deconfliction & SAR
A shared operator whitelist excludes friendly kit from scoring; friendly selectors can be flipped to a hunt state so every convoy node tracks and direction-finds them as a distributed moving-baseline platform.
Deployment
Three form factors, one platform
The same binary runs on a backpack SBC, a vehicle box, or a fixed facility sensor.
Man-Portable
A single self-installing binary on Linux field hardware (Kali ARM64 and SBC class), with an operator hotspot for phone-in control.
Vehicle-Mounted
An auto-detected vehicle profile with hotspot, upstream tether, cellular uplink, and drive-mode collection.
Fixed, Persistent
Installs as a hardened systemd service that survives reboots and runs unattended as a facility or executive-housing sensor for standing perimeter RF monitoring, TSCM, and drone detection.
Operational Applications
Where TALA is fielded
Executive Protection
Tail detection and planted-tracker discovery for protective details and advance teams on the move.
At-Risk Principals
Standing and mobile protection for executives and high-net-worth families against stalking and collection.
Enterprise Security
Rogue-device, insider-threat, and exfiltration detection across corporate offices and campuses.
Boardrooms & Legal
TSCM sweeps for privileged meetings, deal rooms, and sensitive negotiations.
Data Centers & Infrastructure
Perimeter RF monitoring and unauthorized-wireless detection for facilities that cannot be compromised.
Facilities & Executive Housing
Fixed sensors on continuous perimeter RF monitoring, TSCM, and drone detection.
Events & Venues
Pre-event and live RF and TSCM coverage for summits, shareholder meetings, and VIP hospitality.
Government · DoW · LEO
Patrol hunts, facility characterization, and counter-surveillance under authorization and scope.
Training
TALA-WTE, the open-source range
TALA-WTE is the open-source wireless training environment. A leader node broadcasts real networks while a fleet of client radios generate live traffic, producing genuine handshakes and attack targets so operators train against real signals before the field. Free for personal and non-profit use.
Put TALA in the field
TALA is delivered on field-ready collection hardware for protective details, enterprises, and facilities. A specialized government configuration is available to authorized government, defense, and law-enforcement parties under applicable export controls.