DEMO Read-only showcase seeded with synthetic data. Sign-in, reviewing, rules, retention and alerts are disabled. Browse every page and session freely. Install on your fleet →
Back to session
Sigtrace AI.Trace · Forensic session report

Session dev-laptop-bill-medium-1482719

Agent cline on host dev-laptop-bill · 1m11s

Session ID
dev-laptop-bill-medium-1482719
Agent
cline
Host
dev-laptop-bill
First seen
2026-04-22 22:04:34Z
Last seen
2026-04-22 22:05:45Z
Duration
1m11s
Events captured
31
Posted at
2026-04-22 22:14:21Z
Report generated
2026-04-23 10:21:26Z
Report ID
d51934b666c2ab79
Schema version
1
Live dashboard
https://demo.sigtrace.ai/ui/sessions/dev-laptop-bill-medium-1482719
Verdict Medium 2 sensitive paths 2 network targets

Sensitive path hits · 2

PathReasonOpProcessPidWhen
C:\Users\bill\.aws\config aws credentials open 5524 2026-04-22T22:05:45.991767392Z
C:\Users\bill\.aws\config aws credentials open 5524 2026-04-22T22:05:45.991767392Z

Suspicious host queries · 0

No suspicious host queries.

Suspicious command lines · 0

No suspicious command lines.

Registry persistence · 0

No registry persistence writes.

Flagged image loads · 0

No flagged image loads.

Top processes · 1

ImageCount
C:\Program Files\Git\cmd\git.exe1

Top file opens · 5

PathCount
C:\work\api-server\internal\handlers\users.go5
C:\work\api-server\README.md4
C:\work\api-server\internal\server\server.go4
C:\work\api-server\go.mod3
C:\work\api-server\internal\handlers\auth.go3

File writes · 1

PathCount
C:\work\api-server\internal\server\server.go1

File renames / deletes

No renames or deletes.

DNS queries · 6

QueryCount
api.anthropic.com1
cdn.jsdelivr.net1
files.pythonhosted.org1
github.com1
proxy.golang.org1
pypi.org1

TCP targets · 2

TargetCount
140.82.114.3:4431
52.88.101.23:4431
End of report · Session dev-laptop-bill-medium-1482719 · Report d51934b666c2ab79 Generated 2026-04-23 10:21:26Z · schema 1