There is a very suspicious man living in my building. I noticed a new imbedded device at the shared entrance which he claims is a monoxide detector. As an aside, there is no need for a monoxide detector on this level of the building which is extremely unusual.
On the outside, the device is indeed branded with a product number, and everything appears to be a monoxide detector. However, I am aware certain companies and illegal markets sell hidden cameras, freaking devices, network sniffers etc in hardware pieces like this one.
This man has no legal authority to be installing a camera at this entrance, and I intend to open the device and identify the components. My question is firstly: what invasive/illegal activities could an embedded device like this be capable of? I don't expect the man spent 10k or anything, so I doubt it's that sophisticated.
My second question, although possibly for a different site, is how can effectively identify malicious components, especially without compromising the evidence. (I intend to contact the authorities if I can identify a malicious/illegal function)