Session
demo-sensitive-hits
No notes yet. Leave the first one so the next reviewer inherits the context.
| Path | Reason | Op | Process | When |
|---|---|---|---|---|
C:\Users\bill\.aws\credentials
|
aws credentials | open |
C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe
pid 9999
|
2026-04-22T17:14:22.265696906Z |
C:\Users\bill\.ssh\id_rsa
|
ssh keys | open |
C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe
pid 9999
|
2026-04-22T17:14:23.265696906Z |
C:\Users\bill\.ssh\id_ed25519
|
ssh keys | open |
C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe
pid 9999
|
2026-04-22T17:14:24.265696906Z |
C:\work\myapp\.env
|
dotenv | write |
C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe
pid 9999
|
2026-04-22T17:14:25.265696906Z |
C:\work\myapp\.env.production
|
dotenv | write |
C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe
pid 9999
|
2026-04-22T17:14:26.265696906Z |
C:\Users\bill\.kube\config
|
kube config | open |
C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe
pid 9999
|
2026-04-22T17:14:27.265696906Z |
C:\Users\bill\.docker\config.json
|
docker credentials | open |
C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe
pid 9999
|
2026-04-22T17:14:28.265696906Z |
C:\Users\bill\.npmrc
|
npm credentials | open |
C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe
pid 9999
|
2026-04-22T17:14:29.265696906Z |
C:\Users\bill\.pypirc
|
pypi credentials | open |
C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe
pid 9999
|
2026-04-22T17:14:30.265696906Z |
C:\Users\bill\.git-credentials
|
git credentials | open |
C:\Users\bill\AppData\Roaming\Claude\claude-code\2.1.111\claude.exe
pid 9999
|
2026-04-22T17:14:31.265696906Z |
| Key | Value | Op | Reason | Process | When |
|---|---|---|---|---|---|
\REGISTRY\MACHINE\SYSTEM\CurrentControlSet\Services\UpdaterSvc
|
ImagePath |
set | service install | pid 9100 | 2026-04-22T17:14:39.265696906Z |
| Image | Reason | Loaded by | When |
|---|---|---|---|
C:\Users\bill\AppData\Local\Temp\updater-setup.exe
|
session-written |
C:\Windows\System32\cmd.exe
pid 9100
|
2026-04-22T17:14:37.265696906Z |