Most WiFi recon tools answer “what networks are nearby?” Argus answers a different question: is someone following me, and who keeps showing up near my office that should not be there?
Argus is a modular, passive receive-only RF sensor network built on hardware you own. Edge motes — Raspberry Pi units with external USB radios — capture WiFi probe requests, BLE advertisements, and eventually SDR metadata. Each mote emits schema-versioned sightings over MQTT; a central ingest service validates, stores, and correlates them. The design center is identity despite MAC randomization: probed-SSID sets, IE capability blobs, channel and timing patterns, and signal profiles fused into a stable device identity that survives per-scan randomization.
Two deployment shapes share one brain. Fixed motes baseline the normal device population around an office and flag unknown or anomalously recurring visitors — especially at consistent times, which is a casing signature worth noticing. A mobile unit logs what it sees where and when, so a device reappearing across your commute route is evidence, not a hunch. Monitor mode is receive-only: no deauth, no injection, no handshake capture, no false base stations.
Phase 1 is live: shared sighting contract, ingest pipeline, WiFi-sniffer POC node, operator console, and fleet provisioning scripts. BLE and SDR motes, vector-backed analyst tier, and mobile hardening are on the roadmap. The lineage pulls capture patterns from Hermes and deploy lessons from piSetup while leaving offensive tooling explicitly out of scope. Argus Panoptes had a hundred eyes; this version keeps them pointed at your own space.