Session Ledger

Trace what happened, when it happened, and which evidence it produced.

This ledger now includes recovery runs, operator action sessions from /devices, and investigation exports saved from /console.

Logged runs

Select a session to inspect timeline, action history, and linked evidence.