Sanitized live incident
Confirmed compromise
Native source identity and targetable endpoints are private.
highconfirmed
- Confidence
- 97%
- First seen
- Sep 30, 8:27:51 AM PDT
- Evidence through
- Sep 30, 8:48:58 AM PDT
- AI status
- Pending
AI investigation is Pending
Deterministic signals remain live while the bounded assessment completes.
Observed impact
- Remote command execution
- Server identity disclosure
- System discovery
- System information disclosure
Deterministic signals
Response contains non-reflected process identity output
7 observations · 7 httpResponse contains non-reflected kernel identification
2 observations · 2 httpRequest contains shell metacharacters and command tokens
1 observations · 1 http