Cairn dispatcher launching claude/codex/pi worker CLIs as local subprocesses
Detects the Cairn dispatcher (or its uv/python launcher) spawning agent worker CLIs (claude, codex, pi) as child processes in local mode.
Microsoft Sentinel (KQL)

Detects the Cairn dispatcher (or its uv/python launcher) spawning agent worker CLIs (claude, codex, pi) as child processes in local mode.

Already have an account?