DEMO Read-only showcase seeded with synthetic data. Sign-in, reviewing, rules, retention and alerts are disabled. Browse every page and session freely. Install on your fleet →
Back to session
Sigtrace AI.Trace · Forensic session report

Session ml-workstation-low-976093991

Agent kiro-cli on host ml-workstation · 1m0s

Session ID
ml-workstation-low-976093991
Agent
kiro-cli
Host
ml-workstation
First seen
2026-04-21 06:15:43Z
Last seen
2026-04-21 06:16:43Z
Duration
1m0s
Events captured
28
Posted at
2026-04-22 22:14:22Z
Report generated
2026-04-23 10:25:40Z
Report ID
276bd558210751e7
Schema version
1
Live dashboard
https://demo.sigtrace.ai/ui/sessions/ml-workstation-low-976093991
Verdict Low 1 shell spawn 3 network targets

Sensitive path hits · 0

No sensitive path hits.

Suspicious host queries · 0

No suspicious host queries.

Suspicious command lines · 0

No suspicious command lines.

Registry persistence · 0

No registry persistence writes.

Flagged image loads · 0

No flagged image loads.

Top processes · 2

ImageCount
C:\Program Files\Kiro-Cli\kiro-cli.exe1
C:\Windows\System32\cmd.exe1

Top file opens · 4

PathCount
C:\work\pipeline\tests\test_ingest.py4
C:\work\pipeline\pipeline\stages\ingest.py3
C:\work\pipeline\pipeline\stages\transform.py2
C:\work\pipeline\pyproject.toml2

File writes · 2

PathCount
C:\work\pipeline\Makefile1
C:\work\pipeline\pipeline\stages\transform.py1

File renames / deletes

No renames or deletes.

DNS queries · 6

QueryCount
api.anthropic.com1
cdn.jsdelivr.net1
deb.debian.org1
files.pythonhosted.org1
proxy.golang.org1
raw.githubusercontent.com1

TCP targets · 3

TargetCount
140.82.114.3:4431
151.101.0.223:4431
192.229.211.108:4431
End of report · Session ml-workstation-low-976093991 · Report 276bd558210751e7 Generated 2026-04-23 10:25:40Z · schema 1