news.mlab.sh
Back to the feed
threat-intel

Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th)

Info
Summary

Jim Clausing has created two Python scripts, `opencode-chat-replay.py` and `hermes_forensic_extract.py`, to aid in forensic analysis of AI agent activity. `opencode-chat-replay.py` converts SQLite database records into readable conversation transcripts and structured exports, while `hermes_forensic_extract.py` collects a broader range of data sources – including API request dumps and logs – into a filterable JSONL format.

Read the full article at SANS Internet Storm Center

Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data

Report an error
Confirmed errors are fixed and listed on /corrections.