Sigtrace AI.Trace · Forensic session report

Session `staging-ci-01-medium-241498762`

Agent claude-code on host staging-ci-01 · 1m17s

Session ID: staging-ci-01-medium-241498762
Agent: claude-code
Host: staging-ci-01
First seen: 2026-04-22 16:27:28Z
Last seen: 2026-04-22 16:28:45Z
Duration: 1m17s
Events captured: 35
Posted at: 2026-04-22 22:14:21Z
Report generated: 2026-04-23 10:27:45Z
Report ID: 58bf24a67f1e3ce2
Schema version: 1
Live dashboard: https://demo.sigtrace.ai/ui/sessions/staging-ci-01-medium-241498762

Verdict Medium 4 sensitive paths 2 network targets

Sensitive path hits · 4

Path	Reason	Op	Pid	When
`C:\work\myapp\.env`	dotenv	open	4996	`2026-04-22T16:28:43.792774405Z`
`C:\work\myapp\.env`	dotenv	open	4996	`2026-04-22T16:28:43.792774405Z`
`C:\Users\bill\.kube\config`	kube config	open	7919	`2026-04-22T16:28:45.792774405Z`
`C:\Users\bill\.kube\config`	kube config	open	7919	`2026-04-22T16:28:45.792774405Z`

No suspicious host queries.

No suspicious command lines.

No registry persistence writes.

No flagged image loads.

Image	Count
`C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe`	1

Path	Count
`C:\work\webapp\src\App.tsx`	5
`C:\work\webapp\vite.config.ts`	5
`C:\work\webapp\package.json`	4
`C:\work\webapp\src\components\Dashboard.tsx`	4
`C:\work\webapp\src\lib\api.ts`	3
`C:\work\myapp\.env`	2

Path	Count
`C:\work\webapp\src\components\Dashboard.tsx`	1
`C:\work\webapp\vite.config.ts`	1

No renames or deletes.

Target	Count
`104.16.132.229:443`	1
`140.82.114.3:443`	1