{
  "run_id": "20261107T180703Z-crowdstrike-falcon-mcp",
  "created": "2026-11-07T18:11:32.880347+00:00",
  "note": "Published evidence package of a private lab run, built by analysis/export-package.py. Files listed under 'sanitized' differ from the lab originals as described; their raw SHA-256 values allow a later check against the originals. Files under 'not_published' stay private.",
  "versions": {
    "kernel": "7.0.0-42-generic",
    "virsh_daemon": "Compiled against library: libvirt 12.0.0 Using library: libvirt 12.0.0 Using API: QEMU 12.0.0 Running hypervisor: QEMU 10.2.1 Running against daemon: 12.0.0",
    "base_image": "debian-13-genericcloud-amd64-20261026-2643",
    "mitmproxy": "12.3.1"
  },
  "method_version": "0.1",
  "reach_method": "reach-v0.1",
  "tool": {
    "package": "falcon-mcp",
    "version": "v0.19.0",
    "commit": "17fea062558312dfbf981ea09f7ce58a11ea31fb",
    "install": "Installed as the tool user from the pinned source tree into a virtual environment; the 34 dependencies come from the project's uv.lock with their hashes, fetched through the lab proxy."
  },
  "gateway_ruleset_sha256": "7be927d0592a4b886dd176e16716b31fee8d152b5927caf0e2d2c583638ab562",
  "allowlist": {
    "hosts_run": [
      "target"
    ],
    "hosts_driver": [
      "api.anthropic.com",
      "platform.claude.com"
    ],
    "mode": "names: the lab resolver fills the allow sets when it resolves an allowed name; the proxy checks the name per sender"
  },
  "declared_hosts": [],
  "sensors": {
    "declared": [
      "fs",
      "net",
      "exec",
      "cred",
      "persist",
      "hitl"
    ],
    "built": [
      "fs",
      "net",
      "exec",
      "cred",
      "persist",
      "hitl"
    ],
    "no_evidence": []
  },
  "canaries_seeded": true,
  "dns": {
    "log_present": true,
    "sinkhole": "198.18.0.1"
  },
  "model": {
    "route": "client",
    "client": "claude-code",
    "client_version": "2.1.311",
    "model": "claude-haiku-5-5",
    "scripted_model": null,
    "mcp_server": "falcon",
    "mcp_status": "connected",
    "max_turns": 8,
    "budget_cap_usd": 0.5,
    "permission_mode": "dontAsk",
    "cost": {
      "model_route": "client",
      "cost_source": "tool-reported",
      "total_cost_usd": 0.00156415,
      "client_estimate_note": "total_cost_usd ist laut Claude-Code-Doku eine Schätzung des Clients, keine Abrechnung",
      "num_turns": 3,
      "usage": {
        "input_tokens": 4,
        "cache_creation_input_tokens": 3785,
        "cache_read_input_tokens": 63975,
        "output_tokens": 334,
        "output_tokens_details": {
          "thinking_tokens": 183
        },
        "server_tool_use": {
          "web_search_requests": 0,
          "web_fetch_requests": 0
        },
        "service_tier": "standard",
        "cache_creation": {
          "ephemeral_1h_input_tokens": 3785,
          "ephemeral_5m_input_tokens": 0
        },
        "inference_geo": "global",
        "iterations": [],
        "speed": "standard",
        "fallback_credit": null
      },
      "model": "claude-haiku-5-5"
    },
    "tls_decrypted": false,
    "credential_disk": {
      "inventory_before": "raw/cred-inventory-before.csv",
      "inventory_after": "raw/cred-inventory-after.csv"
    }
  },
  "preflight": {
    "mode": "build",
    "failures": 0,
    "host_agent_exception": true,
    "host_agent_note": "a Claude Code session ran on the lab host as the operator's tool; the lab machines cannot open connections to the host"
  },
  "provenance": {
    "golden_images_sha256": {
      "gateway": "1856355a5a2bf6e3080082625526e7b8c54cae90fee2f7548ed53fecd88e2193",
      "driver": "f14881c1cbcb4e762fa9ad0cf605fb978d32074837ae1947ca3f4f967de463dc",
      "runner-min": "277b22bdb43567ff73dcbbee95e4bc7bc2d471b7d4b5407b64b13cb7540462fc",
      "target": "357dd21f57d22547f42a2351554b191cf4ca3ec8733f95e98eae199c6f7a3e2e"
    },
    "source_tree_sha256": "47527d90e75503740d35379292bbd042e939afcddbb6d8a80856c6947d951682",
    "lockfile": {
      "used": true,
      "lockfile_sha256": "a00692ccb093b8d1140b1a6e8382a8bd313541fe18474a0c9dcfe1e59c82e29e",
      "packages_installed": 34,
      "hashes": 354
    }
  },
  "tool_user": "tool (uid 1001), no sudo",
  "files": {
    "blocked.jsonl": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "cost.json": "87a8bbbc63f32a00dfc8b21891b1ca69f22b8182557ab45cb051461adddfdddd",
    "declared.json": "514dc83264b95d6b641291a5cf7cb3c6648ae69788749e276ec583597d812fee",
    "dns.jsonl": "8df9f57358d63be9fcc25fe3305ab9b0aabaa50b46d712b506415bdc4fc01978",
    "egress.jsonl": "ecce924c539c04aab80f164d2cab37e98e048fcd7205a24d231d714d602cc0f2",
    "findings.jsonl": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "fs-diff.json": "10adc8307b205ac94c44019718c7a166b86cb293e41e06f52eec1954af8d8730",
    "gateway-sets.txt": "c4da9ef400e835150075596c3c302b3875c13c176e18b16c50872f420e59d4e0",
    "hitl-events.jsonl": "84a1322f23ae10e7a4e90b4ac7d5d5b505d0d2f1f376a658e26a816eeaaef6ba",
    "host-events.jsonl": "abf1494a8cfd730e9f64cb4e0f8ba8fdbe8df550ec898937bce702c7426ac6e8",
    "install-egress.jsonl": "67460f8f94e5793a96525e30df0f301f065c78c2daf2c11d4fdd7872e52d2978",
    "score.json": "769a09e8a18fdead445ec93d5ae30463569d06c3fb668c894dc3844f66a215fb",
    "session.cast": "76f7dbd8ade95d3c0fa452b1a9d2781646c749c1c37645cf80c6fb242de9fbd9",
    "session.txt": "ca340f273ac75dc926d8ab6d5e40aacf2ff86ee371fcc70c3ef47d39bb2951b1",
    "target-access.txt": "92ed29a03d85be6306f79ab9f26332289f05dad550cfbc502fe608255bfdd644",
    "tool-cmd.sh": "1d4a393526c5f38136b2da762b62c7368c0755901b9fd39c0aa7a6974d7db5f2"
  },
  "sanitized": {
    "gateway-sets.txt": {
      "from": "sensors/gw-nft.txt",
      "raw_sha256": "1bc08db651d92278c81531b5f5a3fb89317128fc647f17d5c2682e269b5b75e7",
      "change": "lines 1-11 only: the allow sets run_allow and run_tgt at run time; the rest of the gateway ruleset is not published"
    }
  },
  "not_published": {
    "allowlist-driver.txt": "918f8fb2714050248765622ec1cc07d77eae3416342a6b42d6a1443df0a99cf0",
    "allowlist.txt": "a0ea45890e662e2f4f2825592ca70966415492af243286274be408ca83fb3c86",
    "approver-policy.json": "3217f22f0fa793d1a503cf18a08b77c3960456b3593f9bf83fa6b3f066eba71a",
    "diff/driver.json": "504794983239b648bed49463c245f73ea7fb7073ec2db2033397a922906e6e6f",
    "diff/gateway.json": "b5f27ca6c7068ebde4b6bbe7be560d1ca4ad6962a2c2e0d8f624f3f4d2a922bd",
    "diff/runner.json": "4e72dc7329ff0eaf35679c8e57e7d2e42b8a4c2a6ceb74401b8af6dfcb605f7c",
    "diff/target.json": "3622ecc24dee1630cecc29bc67299698b1ceeadefc3c7d336aa9475ba7920067",
    "dns-servers.txt": "da79187ecd58ea3e17a7196c53a561e679e041f0dd6df7259cf004e65ae3c5a8",
    "pcap/labctl0.pcap": "93511ed9258f0628d23ffac0fa38758b15dbce5516e68d47110b9b9680d9c8ec",
    "pcap/labrun0.pcap": "4c411a3cb2f74091785927e3a4b7b305f058b8cefcb5446d826ad48b5b174ec3",
    "pcap/labtgt0.pcap": "6bb256bdc662fbe3b2e8df29becbe5554c0040d38ee13896ad352c6489aae57e",
    "pcap/labwan0.pcap": "88b295ee0d361fe85103dae88c62b1c252fe5391aa49a33be60489a3af8168b9",
    "preflight.json": "cf52e4959f18ea573490ee3de6fcbf5c26ff3564f93762379bd9df94ef076cda",
    "preflight.log": "32092120d2b2d7fa671bb3a919a277d9a9b280606c6459fcd381ce002a015e09",
    "profile.yaml": "5e549a3862c35dd7b2e93d6717280f58ffac7aefe93cfef64fbb740f4ad1c2a8",
    "proxy-policy.json": "37954d6c541867a44761e719a456251f7bd302dcef3bdc62864e6787be9c1d01",
    "raw/allowlist-all.txt": "24c40b39890f0684a0a76b506ccb855eefe0cfe20dde70e96bfaf770d8e628fa",
    "raw/canaries.txt": "8e13c099126640100ba5e55d231cacf11e4344480ff54076bb144f732cfe4bec",
    "raw/cred-inventory-after.csv": "6e18b49a0fc1d9314c6360b3f80760426965f77cd388ccf2d3ff584cb69426b0",
    "raw/cred-inventory-before.csv": "dbc062234515649ffab8992c80e73d849d5bf08e4e0e91b00048e06d9210b734",
    "raw/driver.xml": "edcf8a26963a22959c7fe33f3e3f8661beed0cfbea5f27a6f55a356a98dba29a",
    "raw/fs-diff-raw.csv": "6d44b7ee810fb94cc4364752d29711681a6c70baa3cd221b9cd27656a851403c",
    "raw/install-lock.json": "e5d884a777c4242004b3d9fc4b919c2435d0cb0bae7bb9fe88c9840ebcfd928d",
    "raw/install-pip-freeze.txt": "9bc13f77e051ef2f6343d699ce0d5e2f43ac33cb02321d93eede3ad4810052b0",
    "raw/install-source-tree.json": "208a559f156c799eefdb3ed639c2f2a2d1d485f3c7c2bac8908aff7d0968e3a1",
    "raw/mcp_ed25519": "3f57da335e933be857d67605332b25f35baae64d8cbacfe77020360652029c54",
    "raw/mcp_ed25519.pub": "195173b26d80b6f6a70222017db0012015b8548d902671dba2ccfc6aca7c32d8",
    "raw/model-drive.log": "c483f1e06d491b0914e83d9febd161f44893d49c5808fb4725ce3a3f83a5dff4",
    "raw/model-in/budget_usd": "d927324996eb46bf56a6c05c066a8d867e7fbe35921ab148ad357630fffcf281",
    "raw/model-in/max_turns": "aa67a169b0bba217aa0aa88a65346920c84c42447c36ba5f7ea65f422c1fe5d8",
    "raw/model-in/mcp.json": "583a386338838950bd0258cff0c30eda6ce4213966f4f222026dea114185bdab",
    "raw/model-in/model": "baa7db840fd080787203df0c7a2be8b4ee742d136fdb778708840f1a65e53c52",
    "raw/model-in/route": "0c98ae374b72eaf38c61ec07f3b731b50d0b595689a44d1b6750659b47b74421",
    "raw/model-in/task.txt": "351912b7ff33f2e6d8c3b5cd5196b1d242bac28d32d4552d2db6cb9ca1990e10",
    "raw/model-in/timebox": "f60260e656ad57721144aa337d701695322e53d2973b6ff8b384cd0d331bc382",
    "raw/model/claude-version.txt": "0896bb2b0f0c7741c8ab6df43385b83f8fc18620da007e784d0dba2f4b75580b",
    "raw/model/end": "b3a9a4edeea5f1fe8d7bee8eb020da200774e2f63e6c7392e3c44aee961c3063",
    "raw/model/end_epoch": "7e7a35b6d9637f91e14abada467c9039db0669632b21a1ae524961eacc6e62c7",
    "raw/model/rc": "9a271f2a916b0b6ee6cecb2426f0b3206ef074578be55d9bc94f6f3fe3ab86aa",
    "raw/model/start": "340ccd411b110d1a814837a3a7b61828d4681bd8e5c421983de0541bd3db691a",
    "raw/model/start_epoch": "1a8268aa536a666850d17abc748bed64c81d853ba59859d77e40dd2649063ec7",
    "raw/model/stderr.txt": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "raw/model/stream.tsjsonl": "fced1833cd1959ecaf5e531251528b82773ed866b2eb02e228c743c8c55a6487",
    "raw/phase-times.txt": "bb74b730882a282ca6db5c6ea698f8274eaee718b0f8c5ef0200d08d08cf91ef",
    "raw/runner-audit.log": "513ff2526e4705553f2fcdcf00124140bd60ad0222f2486a8eb1b997e6db9f3d",
    "raw/runner-tmp-fstype.txt": "f23f0177ae6d4b7017fcaacd265360c0a7aa662f35571247acd86b32f6675ba7",
    "raw/seed/aws-credentials": "3716a330c1a9bc31e952cbcb3595182246fdcbfbd89add35ede8cd4680788cd5",
    "raw/seed/netrc": "c14994abee59f6e66e98ad604f5cff21f17df0618131cd67236b390544b9e6e4",
    "raw/seed/npmrc": "dbd097d55a5fa9be2ecb4c6657cd88681b74d00f0009ece6cf923d8e375588c2",
    "raw/session.jsonl": "e4d83625bf1fa8b49cc4581652afb1c50f1cb908161d9f9155fb7722bb4b38e3",
    "raw/tool-status.json": "b50b0d46b45ddcb0db4bcc4ba3b8ded2c1959b786fe946918f35eff22355f947",
    "sensors/dns.log": "8350f12c3e9d42dba178c2088dd70afe23db2f4337d90fae1fef76af5a7c581d",
    "sensors/egress.flows": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
    "sensors/gw-sets.txt": "48a8fce412603b2b64e894bc5e0054fb2d7de74de6c1e0890345dd7e4bbe4d2c",
    "sensors/install-dns.log": "68bd001948e75260fd08a41c48792fcca984a400aad0044a770417e17fba6a6f",
    "sensors/install-fs-diff.json": "25e45f623861f4dd2b65147f66311ef23c143c8fb290dfc5f310a1f0a41042dc",
    "target-url.txt": "3bf1d8d9d94e1359311f4c1f38caaa5d97a1be2d87386db843789772f846291e",
    "task.txt": "351912b7ff33f2e6d8c3b5cd5196b1d242bac28d32d4552d2db6cb9ca1990e10"
  },
  "generated_empty": {
    "files": [
      "findings.jsonl",
      "score.json"
    ],
    "note": "this run produced no such file; written empty (or with the reason) so every artifact named in the observation exists"
  }
}