FINDING #7777 · UNIT ID 1335409705
tyeurada/edrEvasionWorkshop
Workshop materials for “Step-by-Step Malware Development: Evading EDR from Loaders to the Kernel” presented at DEF CON 34 and BSidesLV 2026. Covers malware development, EDR Architecture, EDR evasion, C2 customization, and kernel-level techniques.
SURPRISE SCORE
0.00
Score Breakdown
SCORE = SURPRISE × ENGAGEMENT^0.7 × FRESHNESS × VISIBILITY × CONFIDENCE
SURPRISE = WINDOW STARS / DAYS / (AUDIENCE + FLOOR)
8% OF STARS IN ARCHIVE
[BOT] SUSPECTED STAR BOT — SCORE PENALIZED. SIGNATURES:
S2 · NO EXTERNAL ISSUE/PR AUTHORS DESPITE 100+ STARS
S7 · THIS REPO IS ~ALL OF THE OWNER'S STARS
S9 · CREATED JUST BEFORE WINDOW, STARS INVISIBLE IN ARCHIVE
Growth Telemetry
VELOCITY /D
2.86
ACCEL
-0.54
RETENTION
38.9%
PEAK 2026-08-22 · FORK-RETENTION 0.0% · 20 STARS / WINDOW
Author Audience
AUDIENCE
48
FOLLOWERS
22
OWNER ★
257
Engagement Signals
FORKS
39
ISSUE AUTH
0
PR AUTH
0
UNIQUE STARGAZERS 20 / 20 (DIVERSITY 1.00)
Why This Is A Finding
tyeurada/edrEvasionWorkshop собрал 20 звёзд за окно, тогда как у автора всего 22 подписчиков — эффективная аудитория ≈ 48. Это даёт surprise-индекс 0.0326 (звёзды относительно охвата автора, а не в абсолюте). Удержание форков 0.0% и 0 внешних контрибьюторов отделяют реальный инструмент от разовой вспышки. Акселерация отрицательная — внимание остывает после пика.
Related Findings
RANKS ABOVE 20% OF 9760 FINDINGS
METRICS IN CONTEXT
MEDIAN ACROSS ALL 9760 FINDINGS · Δ vs MEDIAN · PERCENTILE = SHARE RANKED BELOW
METRICVALUEMEDIANΔ MEDPERCENTILE
SCORE0.000.00-0.00ABOVE 20%
VELOCITY2.863.71-0.86ABOVE 39%
RETENTION38.9%38.0%+0.9 PPABOVE 50%
FORKS3986-47ABOVE 31%
SURPRISE0.030.01+0.02ABOVE 79%