{"adoption": {"forks": 153, "observed_at": "2026-08-28T04:05:07.540209+00:00", "stars": 1585}, "canonical_url": "https://ross.abutalabs.com/products/awesome-edr-bypass", "card": {"archived": false, "artifact_type": "learning-resource", "description": "Awesome EDR Bypass Resources For Ethical Hacking", "domain": ["security", "penetration-testing", "awesome-lists", "reverse-engineering"], "enriched": true, "function": ["security", "penetration-testing", "developer-tools"], "health_score": 59, "homepage": null, "language": null, "license": null, "license_family": "other", "maturity": "active", "member_repos": ["tkmru/awesome-edr-bypass"], "name": "tkmru/awesome-edr-bypass", "platform": ["windows", "cross-platform"], "pushed_at": "2026-01-26T18:06:04+00:00", "repo": "tkmru/awesome-edr-bypass", "stars": 1585, "tags": ["awesome-list", "edr-bypass", "red-team", "ethical-hacking", "curated-resources", "offensive-security"], "topics": ["awesome-lists", "edr", "edr-bypass", "redteam", "redteaming"], "urls": [], "use_cases": ["find resources on EDR bypass techniques for red team engagements", "learn how malware evades endpoint detection and response tools", "research syscall unhooking and direct syscall techniques", "test the detection accuracy of an EDR product", "prepare for offensive security certifications or pentest work", "understand attacker tradecraft as an incident responder"], "what_it_is": "A curated awesome-list of resources, proof-of-concept code, and tools for bypassing Endpoint Detection and Response (EDR) software, aimed at ethical hacking, penetration testing, and incident response education. It aggregates links to techniques like direct syscalls, API unhooking, and EDR telemetry blocking.", "when_to_avoid": ["you need a ready-to-use production security tool rather than a link collection", "you want defensive EDR software itself", "you lack authorization for offensive security testing, as misuse is illegal"], "when_to_choose": ["you need a curated starting point for EDR evasion research", "you are a red teamer or pentester studying detection bypass techniques", "you are a defender or incident responder wanting to understand attacker methods"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/awesome-edr-bypass", "repo": "tkmru/awesome-edr-bypass", "role": "main", "score": 59}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:05:07.540209+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T03:55:39.593307+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "600bbdaf40683414e0a0084b2468bf4d20c038ec95828904203220c026bdab86", "fetched_at": "2026-08-28T04:05:07.540209+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tkmru/awesome-edr-bypass"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:05:07.540209+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T03:55:39.593307+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "600bbdaf40683414e0a0084b2468bf4d20c038ec95828904203220c026bdab86", "fetched_at": "2026-08-28T04:05:07.540209+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tkmru/awesome-edr-bypass"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T03:55:39.593307+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "600bbdaf40683414e0a0084b2468bf4d20c038ec95828904203220c026bdab86", "fetched_at": "2026-08-28T04:05:07.540209+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tkmru/awesome-edr-bypass"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:05:07.540209+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:05:07.540209+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:05:07.540209+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T03:55:39.593307+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "600bbdaf40683414e0a0084b2468bf4d20c038ec95828904203220c026bdab86", "fetched_at": "2026-08-28T04:05:07.540209+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tkmru/awesome-edr-bypass"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:05:07.540209+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:05:07.540209+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T03:55:39.593307+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "600bbdaf40683414e0a0084b2468bf4d20c038ec95828904203220c026bdab86", "fetched_at": "2026-08-28T04:05:07.540209+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tkmru/awesome-edr-bypass"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:05:07.540209+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:05:07.540209+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:05:07.540209+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T03:55:39.593307+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "600bbdaf40683414e0a0084b2468bf4d20c038ec95828904203220c026bdab86", "fetched_at": "2026-08-28T04:05:07.540209+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tkmru/awesome-edr-bypass"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:05:07.540209+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:05:07.540209+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T03:55:39.593307+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "600bbdaf40683414e0a0084b2468bf4d20c038ec95828904203220c026bdab86", "fetched_at": "2026-08-28T04:05:07.540209+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tkmru/awesome-edr-bypass"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T03:55:39.593307+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "600bbdaf40683414e0a0084b2468bf4d20c038ec95828904203220c026bdab86", "fetched_at": "2026-08-28T04:05:07.540209+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tkmru/awesome-edr-bypass"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T03:55:39.593307+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "600bbdaf40683414e0a0084b2468bf4d20c038ec95828904203220c026bdab86", "fetched_at": "2026-08-28T04:05:07.540209+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tkmru/awesome-edr-bypass"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T03:55:39.593307+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "600bbdaf40683414e0a0084b2468bf4d20c038ec95828904203220c026bdab86", "fetched_at": "2026-08-28T04:05:07.540209+00:00", "kind": "readme", "missing": false, "url": "https://github.com/tkmru/awesome-edr-bypass"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 64, "longevity": 88, "rhythm": 35}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_releases", "no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1232, "days_push": 219, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 59, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}