Kioptrix Session Handoff: Mark Current and Stale Evidence
Prepare a Kioptrix session handoff with observation times, evidence references and the next permitted task. Use closing and restart notes to distinguish current conditions from assumptions made stale by a restore or configuration change.