EFF's 4G fake-eNodeB / IMSI-catcher detector: passively monitors LTE broadcast (PCI, EARFCN, SIBs) to fingerprint cell-site simulators (Stingray/Hailstorm class) by their anomalies. Built on srsRAN; the defensive counterpart used to validate that a rogue-eNB test is detectable.