{
  "started_utc": "2026-11-01T03:52:34.852704+00:00",
  "finished_utc": "2026-11-01T03:52:36.780712+00:00",
  "query_sha256": "b4dc0a2b01d7239afed6a8dbe365b192916581c6c76838031e82ed2b4781cd0e",
  "data": {
    "captured_at": "2026-11-01T12:52:16.6652985+09:00",
    "identity": "testpc\\rnd",
    "current_shell_session": 1,
    "processes": [
      {
        "name": "explorer.exe",
        "pid": 5416,
        "parent_pid": 4268,
        "session_id": 1,
        "owner": "testpc\\rnd",
        "path": "C:\\WINDOWS\\Explorer.EXE",
        "started": "2026-09-10T09:48:48.0507600+09:00"
      },
      {
        "name": "sshd.exe",
        "pid": 43920,
        "parent_pid": 57428,
        "session_id": 1,
        "owner": "testpc\\rnd",
        "path": "C:\\Program Files\\Contextra-SSH-Diagnostics\\OpenSSH-Win64\\sshd.exe",
        "started": "2026-11-01T12:00:15.6930280+09:00"
      }
    ],
    "shortcuts": [
      {
        "link": "C:\\Users\\rnd\\Desktop\\i-VPM Manager.lnk",
        "target": "C:\\icerti\\i-VPM Manager\\i-VPM Manager.exe",
        "arguments": "",
        "working_directory": "C:\\icerti\\i-VPM Manager"
      },
      {
        "link": "C:\\Users\\rnd\\Desktop\\i-VPM Plus.lnk",
        "target": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Plus___\\iVPMPlusLauncher.exe",
        "arguments": "",
        "working_directory": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Plus___"
      },
      {
        "link": "C:\\Users\\rnd\\Desktop\\i-VPM SecuEditor.lnk",
        "target": "C:\\Program Files\\iCerti\\iVPM\\i-VPM SecuEditor\\i-VPM SecuEditor.exe",
        "arguments": "",
        "working_directory": "C:\\Program Files\\iCerti\\iVPM\\i-VPM SecuEditor"
      },
      {
        "link": "C:\\Users\\rnd\\Desktop\\IVPMPlus.exe - 바로 가기.lnk",
        "target": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Plus\\IVPMPlus.exe",
        "arguments": "",
        "working_directory": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Plus"
      },
      {
        "link": "C:\\Users\\rnd\\Desktop\\iVPMViewer.exe - 바로 가기.lnk",
        "target": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Viewer\\iVPMViewer.exe",
        "arguments": "",
        "working_directory": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Viewer"
      },
      {
        "link": "C:\\Users\\rnd\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\i-VPM Manager\\i-VPM Manager.lnk",
        "target": "C:\\icerti\\i-VPM Manager\\i-VPM Manager.exe",
        "arguments": "",
        "working_directory": "C:\\icerti\\i-VPM Manager"
      },
      {
        "link": "C:\\Users\\rnd\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\i-VPM SecuEditor\\i-VPM SecuEditor.lnk",
        "target": "C:\\Program Files\\iCerti\\iVPM\\i-VPM SecuEditor\\i-VPM SecuEditor.exe",
        "arguments": "",
        "working_directory": "C:\\Program Files\\iCerti\\iVPM\\i-VPM SecuEditor"
      },
      {
        "link": "C:\\Users\\rnd\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\i-VPM Viewer\\i-VPM Viewer.lnk",
        "target": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Viewer\\iVPMViewer.exe",
        "arguments": "",
        "working_directory": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Viewer"
      },
      {
        "link": "C:\\Users\\rnd\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\i-VPM Plus.lnk",
        "target": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Plus___\\iVPMPlusLauncher.exe",
        "arguments": "",
        "working_directory": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Plus___"
      },
      {
        "link": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\i-VPM Plus.lnk",
        "target": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Plus\\iVPMPlusLauncher.exe",
        "arguments": "",
        "working_directory": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Plus"
      },
      {
        "link": "C:\\ProgramData\\Microsoft\\Windows\\Start Menu\\Programs\\i-VPM Plus\\i-VPM Plus.lnk",
        "target": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Plus\\IVPMPlus.exe",
        "arguments": "",
        "working_directory": "C:\\Program Files\\iCerti\\iVPM\\i-VPM Plus"
      }
    ],
    "executable_sha256": "5ADD5423835B3D5ADF9F96E6B8A8CABA45B8BE2EE72099A6846FC25A72D36961",
    "executable_version": "2.0.1.2",
    "containers": [
      {
        "name": "/icerti_poc-app-1",
        "id": "be8762b791b1e15a849b22c3c4e733b21d8a29f2b314315f9db87c7b2bc2c0e3",
        "image": "sha256:149a64ab88536695020d035c109a2d8a56d5257ea5960c26f307e3ac6aac707d",
        "started": "2026-10-23T06:04:09.145087474Z",
        "state": "running",
        "restart_count": 0
      },
      {
        "name": "/icerti_poc-redis-1",
        "id": "379ac95cbf25d6c2dd2c787fc6852ea79bad498689a2b2d8ece299bc264c3c42",
        "image": "sha256:8df317692c59703c19ecfa90a8cb17703089f3c8e12c2bd0cd6b3c31005e69d8",
        "started": "2026-10-23T06:03:13.288582474Z",
        "state": "running",
        "restart_count": 0
      },
      {
        "name": "/icerti_poc-db-1",
        "id": "b6d099920e94a2aef5a984baa7fb43ba722736a29167f1010d9068369aabae2b",
        "image": "sha256:611a2fcc5fa7c6ceb8644c6f74b25ede004ff6c3a6b38c8f8c23d3bbf6c26430",
        "started": "2026-10-23T06:03:13.300560389Z",
        "state": "running",
        "restart_count": 0
      }
    ],
    "last_boot": "2026-09-10T09:45:07.5000000+09:00",
    "listeners": [],
    "free_ram_kib": 8314992,
    "c_free_bytes": 69576019968
  }
}