DEMO Read-only showcase seeded with synthetic data. Sign-in, reviewing, rules, retention and alerts are disabled. Browse every page and session freely. Install on your fleet →
Back to session
Sigtrace AI.Trace · Forensic session report

Session build-agent-01-clean-97502739

Agent codex-cli on host build-agent-01 · 49s

Session ID
build-agent-01-clean-97502739
Agent
codex-cli
Host
build-agent-01
First seen
2026-04-22 18:40:08Z
Last seen
2026-04-22 18:40:57Z
Duration
49s
Events captured
31
Posted at
2026-04-22 22:14:22Z
Report generated
2026-04-23 14:43:11Z
Report ID
2c223817c7ff4527
Schema version
1
Live dashboard
https://demo.sigtrace.ai/ui/sessions/build-agent-01-clean-97502739
Verdict Clean 4 network targets No flags

Sensitive path hits · 0

No sensitive path hits.

Suspicious host queries · 0

No suspicious host queries.

Suspicious command lines · 0

No suspicious command lines.

Registry persistence · 0

No registry persistence writes.

Flagged image loads · 0

No flagged image loads.

Top processes · 1

ImageCount
C:\Users\bill\AppData\Local\Programs\codex\codex.exe1

Top file opens · 5

PathCount
C:\work\api-server\README.md4
C:\work\api-server\internal\handlers\auth.go4
C:\work\api-server\go.mod3
C:\work\api-server\internal\handlers\users.go3
C:\work\api-server\internal\server\server.go3

File writes · 3

PathCount
C:\work\api-server\go.mod1
C:\work\api-server\internal\handlers\auth.go1
C:\work\api-server\internal\server\server.go1

File renames / deletes

No renames or deletes.

DNS queries · 6

QueryCount
cdn.jsdelivr.net1
deb.debian.org1
files.pythonhosted.org1
github.com1
raw.githubusercontent.com1
registry.npmjs.org1

TCP targets · 4

TargetCount
104.16.132.229:4431
192.229.211.108:4431
34.107.221.82:4431
52.88.101.23:4431
End of report · Session build-agent-01-clean-97502739 · Report 2c223817c7ff4527 Generated 2026-04-23 14:43:11Z · schema 1