AI coding agents run with broad system privileges and generate a stream of EDR telemetry that is hard to interpret. This post maps each agent tool call to its host-level footprint — process, file, and network — across Claude Code and OpenCode, and explains where EDR visibility holds up and where it breaks down.

In the summer of 2021, I stayed on campus to prepare for studying abroad and various competition projects.

I am taking 18351: Full-Stack Software Development for Engineers, offered by Prof. Hakan Erdogmus this semester. The course project involves developing a web application named YACA (Yet Another Chat App). This application allows users to register, login, manage a friend list, invite other friends, and engage in group chats.