Bareclaw
Named by 3 kept items in this workspace.
2 items name it under threat actors and 1 under classification.key entities.
Search every workspace for Bareclaw. It matches the name as written, so it can find other things that share it.
The items that name it 3
custom SOCKS5 proxy tunneler supporting encryption, chaining to an upstream proxy, and authentication
custom SOCKS5 tunneler over WebSocket, written in C, deployed as /tmp/ingredi_ws
All threat actors in this workspace.