DEMO Read-only showcase seeded with synthetic data. Sign-in, reviewing, rules, retention and alerts are disabled. Browse every page and session freely. Install on your fleet →
Back to session
Sigtrace AI.Trace · Forensic session report

Session ml-workstation-low-79408456

Agent claude-code on host ml-workstation · 1m0s

Session ID
ml-workstation-low-79408456
Agent
claude-code
Host
ml-workstation
First seen
2026-04-22 20:38:02Z
Last seen
2026-04-22 20:39:02Z
Duration
1m0s
Events captured
29
Posted at
2026-04-22 22:14:22Z
Report generated
2026-04-23 10:24:59Z
Report ID
7169400efa615e78
Schema version
1
Live dashboard
https://demo.sigtrace.ai/ui/sessions/ml-workstation-low-79408456
Verdict Low 1 shell spawn 2 network targets

Sensitive path hits · 0

No sensitive path hits.

Suspicious host queries · 0

No suspicious host queries.

Suspicious command lines · 0

No suspicious command lines.

Registry persistence · 0

No registry persistence writes.

Flagged image loads · 0

No flagged image loads.

Top processes · 2

ImageCount
C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe1
C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe1

Top file opens · 4

PathCount
C:\work\pipeline\pipeline\stages\transform.py5
C:\work\pipeline\pipeline\stages\ingest.py4
C:\work\pipeline\pyproject.toml3
C:\work\pipeline\tests\test_ingest.py3

File writes · 1

PathCount
C:\work\pipeline\pipeline\stages\ingest.py1

File renames / deletes

No renames or deletes.

DNS queries · 6

QueryCount
api.anthropic.com1
cdn.jsdelivr.net1
proxy.golang.org1
pypi.org1
raw.githubusercontent.com1
registry.npmjs.org1

TCP targets · 2

TargetCount
104.16.132.229:4431
34.107.221.82:4431
End of report · Session ml-workstation-low-79408456 · Report 7169400efa615e78 Generated 2026-04-23 10:24:59Z · schema 1