[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_t2kt8pLBbSD10qrCADO89eFtkOjNnPQkYA3w5XIeEE":3},{"article":4,"iocs":52,"watch_terms":53,"solutions":54,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"2c8e7c6f-122e-4bf6-8d2b-5b64663ba815","numbat – Endpoint Visibility and Forensics for AI Coding Agents","numbat-endpoint-visibility-and-forensics-for-ai-coding-agents-3ddaa4","numbat monitors Claude Code, Codex and other AI coding agents and rebuilds their sessions. Tested on a staged session; its blocking is opt-in and narrow.","numbat is a new open-source tool from Perplexity that monitors AI coding agents like Claude Code, Codex, and Cursor. It hooks into these agents to normalize their activity into a single event model, allowing for detection rules to be run locally. The tool can rebuild sessions from stored evidence, identifying potentially malicious actions such as secret file reads followed by data exfiltration attempts.","numbat is an open-source tool to monitor AI coding agents and rebuild their sessions.","https:\u002F\u002Fwww.darknet.org.uk\u002F2026\u002F10\u002Fnumbat-endpoint-visibility-and-forensics-for-ai-coding-agents\u002F","https:\u002F\u002Fwww.darknet.org.uk\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002Fnumbat-endpoint-visibility-forensics-ai-coding-agents.webp","2026-10-12T11:15:22+00:00","2026-10-12T12:00:09.352386+00:00",7,[17,20,23,25,27,29],{"name":18,"type":19},"numbat","product",{"name":21,"type":22},"Perplexity","vendor",{"name":24,"type":19},"Claude Code",{"name":26,"type":19},"Codex",{"name":28,"type":19},"Cursor",{"name":30,"type":19},"Gemini CLI","02371804-cf6d-4449-98de-f1a2d4d9b266",{"id":31,"icon":33,"name":34,"slug":35},null,"Tools","tools",[37,42,47],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":43},{"id":44,"icon":33,"name":45,"slug":46},"ade75414-7914-4e23-a450-48b64546ee70","Open Source","open-source",{"category":48},{"id":49,"icon":33,"name":50,"slug":51},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18,24],{"controls":55,"vendors":139},[56,85,114],{"slug":57,"name":58,"problem":59,"products":60},"secrets-management","Secrets management","API keys, tokens and passwords stop leaking from code, chat and configuration files.",[61,69,77],{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"gitguardian","GitGuardian","\u002Fvendor-logos\u002Fgitguardian.png","gitguardian-platform","GitGuardian Secrets Detection","https:\u002F\u002Fwww.gitguardian.com\u002F","Finds and helps remediate secrets leaked in repositories, CI pipelines and chat tools.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","idira-secrets-management","Idira Secrets Management","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fidira\u002Fmachine\u002Fsecrets-management","Secrets management for applications, scripts and pipelines, from the former CyberArk portfolio.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"hashicorp","HashiCorp","\u002Fvendor-logos\u002Fhashicorp.png","vault","HashiCorp Vault","https:\u002F\u002Fwww.hashicorp.com\u002Fen\u002Fproducts\u002Fvault","Secrets management with short-lived credentials and encryption as a service.",{"slug":86,"name":87,"problem":88,"products":89},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[90,98,106],{"vendor_slug":91,"vendor_name":92,"vendor_logo":93,"product_slug":94,"product_name":95,"url":96,"description":97},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"slug":41,"name":115,"problem":116,"products":117},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[118,126,134],{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","ai-defense","Cisco AI Defense","https:\u002F\u002Fwww.cisco.com\u002Fsite\u002Fus\u002Fen\u002Fproducts\u002Fsecurity\u002Fai-defense\u002Findex.html","Discovery of AI use, testing of models and guardrails for AI applications.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":135,"product_name":136,"url":137,"description":138},"prisma-airs","Prisma AIRS","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fai-security\u002Fprisma-airs","Security for AI applications, models and agents, including runtime protection against prompt injection.",[],{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":157},"ai-coding-agents-require-dedicated-endpoint-visibility-and-forensic-controls","AI Coding Agents Require Dedicated Endpoint Visibility and Forensic Controls","As AI coding agents like Claude Code, Codex, and Cursor gain widespread adoption in development environments, they introduce a novel and underappreciated attack surface: autonomous processes with broad filesystem, network, and credential access operating largely unmonitored. Without dedicated tooling, these agents can read sensitive secret files and exfiltrate data with no human-visible trail, making forensic reconstruction nearly impossible after the fact. The release of numbat highlights that traditional endpoint detection tools were not designed to normalize or interpret AI agent activity, leaving a critical visibility gap. This matters because AI agents frequently operate with developer-level privileges in environments containing source code, API keys, and cloud credentials — exactly the data most valuable to attackers. Treating AI agents as trusted black boxes without audit controls is a systemic security failure waiting to be exploited.",[145,146,147,148,149,150,151,152,153,154,155,156],"CIS Control 8 – Audit Log Management","CIS Control 3 – Data Protection","CIS Control 6 – Access Control Management","CIS Control 13 – Network Monitoring and Defense","NIST SP 800-53 AU-2 – Event Logging","NIST SP 800-53 AU-12 – Audit Record Generation","NIST SP 800-53 AC-6 – Least Privilege","NIST SP 800-53 SI-4 – System Monitoring","NIST AI RMF – Govern 1.2, Map 1.5 (AI risk identification and monitoring)","GDPR Article 32 – Security of Processing (for environments handling personal data)","MITRE ATT&CK T1552 – Unsecured Credentials","MITRE ATT&CK T1041 – Exfiltration Over C2 Channel",{}]