Investigate · artefacts

Evidence Viewer

Immutable artefacts for incident inc-4821 — pick a custom date/time window to review previous history, logs, and graphs.

Open RCA

In window

6

artefacts

Kinds

5

classes

Integrity

100%

verified

Verify / min

6

live

Focus

off

⌘\

Selected

#4

id

Hash-verified stream

Select a time window, then an artefact. Focus (⌘\\) maximizes the reading canvas.

Read-only Agent OS

History window

Aug 2, 06:30 AM → Aug 2, 06:50 AM

Filters timeline, logs, and load graphs by time

Artefacts

6 in selected window

egress-probe.txt

integrity verifiedsha256:b013af…9e77

Captured Aug 2, 2026, 6:45:33 AM·2026-08-02T06:45:33.000Z

Incident inc-4821·Nordic Federated Bank · FS Core Banking Platform · production

Network evidence (read-only)

Capture locus

1 resource

fs-prod-cs-tool2

network
Application
registry egress path
Hostname
fs-prod-cs-tool2
IP address
10.42.6.21
Cluster
fs-prod-k8s
FQDN / endpoint
registry.corp.internal
Region
eu-north-1
Role
network

Logs · filtered by time

# egress probe · capturedAt=2026-08-02T06:45:33.401Z · mode=read-only

probe tcp 198.51.100.44:443 from 10.42.6.21
  dns:       registry.corp.internal → 198.51.100.44 (ok, 4ms)
  handshake: ok (TLSv1.3, 118ms)
  stream:    RST after 6.4s, 5.1MB transferred (layer expected 38.4MB)

egress path: node-subnet -> fw-core-02 -> ssl-inspect-appliance-03 -> internet-edge
change correlation: CHG-20482 (SSL inspection policy update)
  onset gap: 23m before first ErrImagePull (06:38:11Z)
  bypass:    registry.corp.internal NOT in ssl-inspect exclusion list