usb-canary
A Linux or OSX tool that uses psutil to monitor devices while your computer is locked. In the case it detects someone pl
defensiveBlue Team
TooldefensiveblueLinuxBlackArchPlatforms: Linux · Last verified September 6, 2026
A Linux or OSX tool that uses psutil to monitor devices while your computer is locked. In the case it detects someone plugging in or unplugging devices it can be configured to send you an SMS or alert you via Slack or Pushover.
Only use this tool against systems you own or are explicitly authorized to test — see the disclaimer.
Getting started
Install on BlackArch with `pacman -S usb-canary` (or add the BlackArch repository to an existing Arch Linux install). See the official BlackArch tool listing and upstream homepage linked above for details.
