DEMO Read-only showcase seeded with synthetic data. Sign-in, reviewing, rules, retention and alerts are disabled. Browse every page and session freely. Install on your fleet →
Session

demo-heavy-activity

claude-code on dev-laptop-bill · 2m10s · first 2026-04-22 16:14:21 · last 2026-04-22 16:16:31
Notes 0

No notes yet. Leave the first one so the next reviewer inherits the context.

4 processes · 7 opens · 7 writes · 1 renames · 1 deletes · 5 DNS · 4 TCP · 0 UDP

Processes

Executables (4)
C:\Program Files\Git\usr\bin\bash.exe 1
C:\Program Files\nodejs\node.exe 1
C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe 1
C:\Windows\System32\cmd.exe 1

Files

File opens (7)
C:\work\shadowtrace\README.md 9
C:\work\shadowtrace\go.mod 8
C:\work\shadowtrace\cmd\etw-probe\main.go 7
C:\work\shadowtrace\internal\storage\pgstore\store.go 6
C:\work\shadowtrace\internal\summary\summary.go 5
C:\work\shadowtrace\internal\server\ui.go 4
C:\work\shadowtrace\internal\server\server.go 3
Writes (7)
C:\work\shadowtrace\README.md 1
C:\work\shadowtrace\cmd\etw-probe\main.go 1
C:\work\shadowtrace\go.mod 1
C:\work\shadowtrace\internal\server\server.go 1
C:\work\shadowtrace\internal\server\ui.go 1
C:\work\shadowtrace\internal\storage\pgstore\store.go 1
C:\work\shadowtrace\internal\summary\summary.go 1
Dir opens (0)

none

Renames (1)
C:\work\shadowtrace\internal\server\server.go 1
Deletes (1)
C:\work\shadowtrace\scratch\old.txt 1

Network

DNS queries (5)
api.anthropic.com 1
deb.debian.org 1
github.com 1
proxy.golang.org 1
registry.npmjs.org 1
TCP targets (4)
104.16.132.229:443 1
140.82.114.3:443 1
34.107.221.82:443 1
52.88.101.23:443 1