# Quick Start Guide: Warlock's Stave ## Prerequisites | Component | Debian/Ubuntu | Arch Linux | Purpose | |---|---|---|---| | **Rust toolchain** | `rustup` | `rustup` | Core compilation | | **LLVM / Clang** | `clang / llvm` | `clang / llvm` | eBPF bytecode | | **MingW-w64** | `g++-mingw-w64-x86-64` | `mingw-w64-gcc` | Wine/Windows plugin build | | **Security Caps** | `libcap2-bin` | `libcap` | Thread capabilities | | **Graphics** | `libx11-dev`, `libwayland-dev` | `libx11`, `wayland` | egui rendering | ## Installation ```bash # 1. Clone the repository git clone https://github.com/warlock-architecture/stave-core.git cd stave-core mkdir -p ebpf_bin # 2. Run the pre-flight environment validator cargo run --bin environment_check # 3. Build everything chmod +x build.sh ./build.sh # 4. Configure system capabilities (Linux) sudo setcap cap_net_admin,cap_perfmon+ep ./target/release/libstave_core.so ``` ## Verification Run the live diagnostics in two terminals: ```bash # Terminal 1: Start the IPC daemon and test cargo test -- --nocapture test_live_fire_ingestion_handshake # Terminal 2: Send simulated evasion telemetry cargo run --bin simulate_evasion_telemetry ``` ## Keyboard Controls (Action HUD) | Key | Action | |---|---| | `F1` | Help / Spellbook | | `F2` | Load Target / Attach to PID | | `F3` | Transmute (Inline Patch) | | `F4` | Cycle View Mode (Hex / Assembly / Headers) | | `F5` | Go To Address | | `F6` | Search Pattern | | `F7` | Step Into | | `F8` | Step Over | | `Alt+L` | Toggle Loop Filter | | `Alt+B` | Toggle Breakpoint Filter | | `Alt+D` | Toggle Disk I/O Filter | | `Alt+N` | Toggle Network I/O Filter | | `Ctrl+G` | Follow Pointer in Hex Dump | | `Ctrl+T` | Cast Structure Overlay | | `Ctrl+Z` | Undo Patch | | `F10` | Exit Panel |