Beacon v1.5.0 — Network Analysis & Threat Prevention

Beacon v1.5.0

Beacon is a network security and investigation tool designed to make packet analysis more accessible and actionable.

What's New

• Modular threat prevention subsystem
• Monitor Only, Ask Before Blocking, and Automatic Protection policies
• Manual destination IP blocking with configurable expiry
• Block verification, revocation, and audit history
• Safety checks for protected addresses and configured allowlists
• PIN-protected prevention API endpoints
• Updated dashboard with threat prevention controls
• Improved offline PCAP analysis isolation
• Expanded automated test coverage and release verification

Core Features

• PCAP and PCAPNG analysis
• Network host and conversation investigation
• Protocol analysis, timelines, and findings
• Live traffic capture on supported systems
• Web dashboard and command-line interface
• Evidence-based investigation and reporting

Security Notes

• Threat prevention defaults to Monitor Only
• Automatic Protection requires explicit opt-in
• Firewall enforcement depends on the operating system, permissions, and supported adapter
• Linux nftables enforcement requires separate validation in a suitable test environment
• Remote access over plain HTTP does not encrypt credentials or captured data

Future Roadmap

• Raspberry Pi and low-resource Linux sensor deployment
• Broader router and traffic-mirroring integrations
• Network-wide device discovery and monitoring
• Improved sensor health and evidence-retention controls
• Further hardening of threat prevention and remote access

Important

Beacon's network-wide monitoring and Raspberry Pi deployment are future goals and should not be considered universally supported in this release.

See README.md for installation instructions, current limitations, and usage details.