{% extends "base.html" %} {% block title %}Forensics · {{ agent.hostname }}{% endblock %} {% block content %}

Dashboard › {{ org.name }} › {{ agent.hostname }} ›

Forensic Triage

{{ agent.os }} {{ agent.os_version or '' }} {% if cmd %}· captured {{ cmd.created_at| pt('%Y-%m-%d %H:%M') }}{% else %}· no triage captured yet{% endif %}

‹ Security
{% if pending %}{% endif %} {% if proc_tree %}
Process Tree · reconstructed from recent process telemetry · ⚠ = flagged by a detection
{% endif %} {% if sections %}
{% for s in sections %}
{{ s.title }} 
{{ s.content or '(empty)' }}
{% endfor %}

Read-only snapshot: running processes, network connections, listening ports, autoruns and scheduled tasks at capture time. For live response (isolate / kill / re-scan), use the device Security tab.

{% else %} {% endif %} {% endblock %}