Contraband Assessment Report — {{ .TargetHost }}

Egress Exposure Index

{{ printf "%.1f" .Summary.EEIScore }}%

Hardened Perimeter

Moderate Exposure

Critical Exposure

L4 Ports (Sport 30%){{ printf "%.1f" .Summary.Sport }}%

L7 Protocols (Sproto 40%){{ printf "%.1f" .Summary.Sproto }}%

DLP Efficacy (Sdlp 30%){{ printf "%.1f" .Summary.Sdlp }}%

Probes Tested

{{ .Summary.SuccessCount }} successful / open

L4 Blocked

Firewall drops & resets

L7 Blocked

Proxy & DPI rejections

DLP Intercepted

Content filters triggered

Exfiltrated Volume

{{ formatBytes .Summary.TotalBytesRecv }} received back

Average Latency

Per probe round-trip

Credentials Vault

Harvested hashes & keys

Findings Total

SARIF rules flagged

Protocol	Port	Verdict	Latency
{{ .Protocol }}	{{ .TargetPort }}	{{ verdictBadge .Verdict }}	{{ formatMS (divDurMS .Timestamps.TotalDuration) }}

Profile	JA4 Fingerprint	Verdict
{{ .TLSProfile }}	`{{ truncateHash .JA4String 24 }}`	{{ verdictBadge .Verdict }}

Payload Type	Carrier	Volume	Throughput	Payload SHA-256	Verdict
{{ .PayloadType }}	{{ .CarrierType }}	{{ formatBytes .TargetVolume }}	{{ printf "%.1f" .ThroughputBps }} KB/s	`{{ truncateHash .PayloadHash 16 }}`	{{ verdictBadge .Verdict }}

No credentials or NetNTLMv2 authentication hashes were exposed during assessment.

{{ .Protocol }} • User: {{ .Username }} • Domain: {{ .Domain }}

Time (UTC)	Stage	Proto	Port	Verdict	Latency	Action
{{ formatRFC3339MS $p.Timestamp }}	{{ $p.Stage }}	{{ $p.Protocol }}	{{ $p.TargetPort }}	{{ verdictBadge $p.Verdict }}	{{ formatMS (divDurMS $p.Timestamps.TotalDuration) }}
Forensic Timing Breakdown (ms) TCP: {{ formatMS (divDurMS $p.Timestamps.TCPDuration) }} TLS: {{ formatMS (divDurMS $p.Timestamps.TLSDuration) }} Transfer: {{ formatMS (divDurMS $p.Timestamps.TransferDuration) }} Total: {{ formatMS (divDurMS $p.Timestamps.TotalDuration) }} {{ if $p.PayloadHash }} Payload SHA-256: `{{ $p.PayloadHash }}` {{ end }} {{ if $p.RawEvidence }} Bounded Raw Evidence Hex Dump {{ $p.RawEvidence }} {{ end }}