DEMO Read-only showcase seeded with synthetic data. Sign-in, reviewing, rules, retention and alerts are disabled. Browse every page and session freely. Install on your fleet →
Back to session
Sigtrace AI.Trace · Forensic session report

Session dev-laptop-bill-low-19402535

Agent cline on host dev-laptop-bill · 1m0s

Session ID
dev-laptop-bill-low-19402535
Agent
cline
Host
dev-laptop-bill
First seen
2026-04-22 20:17:56Z
Last seen
2026-04-22 20:18:56Z
Duration
1m0s
Events captured
24
Posted at
2026-04-22 22:14:22Z
Report generated
2026-04-23 10:25:10Z
Report ID
e36b67e80963448e
Schema version
1
Live dashboard
https://demo.sigtrace.ai/ui/sessions/dev-laptop-bill-low-19402535
Verdict Low 1 shell spawn 2 network targets

Sensitive path hits · 0

No sensitive path hits.

Suspicious host queries · 0

No suspicious host queries.

Suspicious command lines · 0

No suspicious command lines.

Registry persistence · 0

No registry persistence writes.

Flagged image loads · 0

No flagged image loads.

Top processes · 2

ImageCount
C:\Program Files\Git\cmd\git.exe1
C:\Program Files\Git\usr\bin\bash.exe1

Top file opens · 4

PathCount
C:\work\pipeline\pipeline\stages\ingest.py4
C:\work\pipeline\pipeline\stages\transform.py3
C:\work\pipeline\pyproject.toml2
C:\work\pipeline\tests\test_ingest.py2

File writes · 2

PathCount
C:\work\pipeline\Makefile1
C:\work\pipeline\tests\test_ingest.py1

File renames / deletes

No renames or deletes.

DNS queries · 5

QueryCount
api.anthropic.com1
cdn.jsdelivr.net1
files.pythonhosted.org1
pypi.org1
raw.githubusercontent.com1

TCP targets · 2

TargetCount
104.16.132.229:4431
192.229.211.108:4431
End of report · Session dev-laptop-bill-low-19402535 · Report e36b67e80963448e Generated 2026-04-23 10:25:10Z · schema 1