Back to evidence

Sanitized live incident

Suspicious activity

Native source identity and targetable endpoints are private.

mediumopen
Confidence
85%
First seen
Aug 17, 7:32:34 PM PDT
Evidence through
Aug 17, 7:32:34 PM PDT
AI status
Outside window
AI investigation is Outside window

Deterministic signals remain live while the bounded assessment completes.

Observed impact

  • Server identity disclosure

Deterministic signals

Http.server command output85%

Response contains non-reflected process identity output

1 observations · 1 http