10.06 / 50 min

Preserve sessions, evidence, and reports

Review sessions, verify audit evidence, and export the minimum report needed for a reproducible security conclusion.

By the endInspect and replay sessionsVerify audit integrityChoose an appropriate report format
Controlled exercise

Use only the course lab on 127.0.0.1:8765. Do not copy these tests to a public system without explicit written authorization.

01

Review the saved session

List sessions, inspect the selected run, and replay only after confirming the original target and credentials are still authorized.

basilisk sessions
basilisk replay --help
02

Verify audit evidence

Use Basilisk audit verification for the saved log. A persistent signing identity can link evidence over time; an ephemeral key proves only that the current session produced a self-consistent log.

basilisk audit-verify --help
basilisk audit-trust-export --help
03

Export for the audience

Use HTML or Markdown for human review, JSON for automation, SARIF for code-scanning ingestion, and PDF only when a fixed document is required. Remove secrets and unnecessary model content.

Expected result

The chosen report includes target, version, test configuration, timestamps, findings, confidence, and sanitized evidence.

04

Write a reproducible conclusion

Document the exact control pair, module and probe, expected and actual behaviors, limitations, and the command needed to repeat the local exercise.

MASTERY CHECKPOINT

Prove it before moving on.

A second learner can verify the audit record and reproduce the finding without receiving a provider secret.