DEMO Read-only showcase seeded with synthetic data. Sign-in, reviewing, rules, retention and alerts are disabled. Browse every page and session freely. Install on your fleet →
Back to session
Sigtrace AI.Trace · Forensic session report

Session build-agent-01-low-13053276

Agent codex-cli on host build-agent-01 · 1m0s

Session ID
build-agent-01-low-13053276
Agent
codex-cli
Host
build-agent-01
First seen
2026-04-21 07:48:56Z
Last seen
2026-04-21 07:49:56Z
Duration
1m0s
Events captured
27
Posted at
2026-04-22 22:14:21Z
Report generated
2026-04-23 10:33:10Z
Report ID
730260a3169001da
Schema version
1
Live dashboard
https://demo.sigtrace.ai/ui/sessions/build-agent-01-low-13053276
Verdict Low 1 shell spawn 4 network targets

Sensitive path hits · 0

No sensitive path hits.

Suspicious host queries · 0

No suspicious host queries.

Suspicious command lines · 0

No suspicious command lines.

Registry persistence · 0

No registry persistence writes.

Flagged image loads · 0

No flagged image loads.

Top processes · 2

ImageCount
C:\Users\bill\AppData\Local\Programs\codex\codex.exe1
C:\Windows\System32\cmd.exe1

Top file opens · 5

PathCount
C:\work\api-server\README.md3
C:\work\api-server\internal\handlers\users.go3
C:\work\api-server\go.mod2
C:\work\api-server\internal\handlers\auth.go2
C:\work\api-server\internal\server\server.go2

File writes · 3

PathCount
C:\work\api-server\README.md1
C:\work\api-server\internal\handlers\auth.go1
C:\work\api-server\internal\server\server.go1

File renames / deletes

No renames or deletes.

DNS queries · 6

QueryCount
api.anthropic.com1
deb.debian.org1
files.pythonhosted.org1
github.com1
proxy.golang.org1
pypi.org1

TCP targets · 4

TargetCount
151.101.0.223:4431
192.229.211.108:4431
34.107.221.82:4431
52.88.101.23:4431
End of report · Session build-agent-01-low-13053276 · Report 730260a3169001da Generated 2026-04-23 10:33:10Z · schema 1