{"adoption": {"forks": 177, "observed_at": "2026-08-28T04:04:25.163277+00:00", "stars": 1334}, "canonical_url": "https://ross.abutalabs.com/products/bluespawn", "card": {"archived": false, "artifact_type": "application", "description": "An Active Defense and EDR software to empower Blue Teams", "domain": ["security", "windows", "developer-tools"], "enriched": true, "function": ["security", "monitoring", "alerting", "vulnerability-scanning"], "health_score": 83, "homepage": null, "language": "C++", "license": "GPL-3.0", "license_family": "copyleft", "maturity": "active", "member_repos": ["ION28/BLUESPAWN"], "name": "ION28/BLUESPAWN", "platform": ["windows", "cpp"], "pushed_at": "2026-03-31T02:20:14+00:00", "repo": "ION28/BLUESPAWN", "stars": 1334, "tags": ["edr", "blue-team", "mitre-attack", "threat-hunting", "active-defense", "endpoint-security", "malware-detection"], "topics": ["active-defense", "windows", "security", "security-tools", "blue-team", "mitre-attack", "anti-virus", "edr", "threat-hunting"], "urls": [], "use_cases": ["detect malware on windows endpoints", "threat hunting on windows systems", "monitor systems for active attacker behavior", "map endpoint detections to mitre att&ck", "open-source alternative to commercial EDR", "hunt persistence mechanisms on compromised hosts"], "what_it_is": "BLUESPAWN is an open-source active defense and endpoint detection and response (EDR) tool for Windows. It helps blue teams detect, identify, and eliminate malicious activity and malware in real time, with detections mapped to MITRE ATT&CK.", "when_to_avoid": ["you need cross-platform (Linux/macOS) endpoint protection", "you require enterprise-grade EDR with managed response and support", "you need protection for non-Windows servers or cloud workloads"], "when_to_choose": ["you are a blue team defending Windows endpoints", "you want transparent, open-source detection logic mapped to MITRE ATT&CK", "you need a lightweight tool to hunt and remove malware during incident response"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/bluespawn", "repo": "ION28/BLUESPAWN", "role": "main", "score": 69}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.163277+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T04:44:27.645140+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "178b5d14aaee81823b3c9db30e5d6c84b05484f842274f5e1d57431a094fa75a", "fetched_at": "2026-08-28T04:04:25.163277+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ION28/BLUESPAWN"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.163277+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T04:44:27.645140+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "178b5d14aaee81823b3c9db30e5d6c84b05484f842274f5e1d57431a094fa75a", "fetched_at": "2026-08-28T04:04:25.163277+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ION28/BLUESPAWN"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T04:44:27.645140+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "178b5d14aaee81823b3c9db30e5d6c84b05484f842274f5e1d57431a094fa75a", "fetched_at": "2026-08-28T04:04:25.163277+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ION28/BLUESPAWN"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.163277+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.163277+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.163277+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T04:44:27.645140+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "178b5d14aaee81823b3c9db30e5d6c84b05484f842274f5e1d57431a094fa75a", "fetched_at": "2026-08-28T04:04:25.163277+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ION28/BLUESPAWN"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.163277+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.163277+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T04:44:27.645140+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "178b5d14aaee81823b3c9db30e5d6c84b05484f842274f5e1d57431a094fa75a", "fetched_at": "2026-08-28T04:04:25.163277+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ION28/BLUESPAWN"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.163277+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.163277+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.163277+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T04:44:27.645140+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "178b5d14aaee81823b3c9db30e5d6c84b05484f842274f5e1d57431a094fa75a", "fetched_at": "2026-08-28T04:04:25.163277+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ION28/BLUESPAWN"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.163277+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:04:25.163277+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T04:44:27.645140+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "178b5d14aaee81823b3c9db30e5d6c84b05484f842274f5e1d57431a094fa75a", "fetched_at": "2026-08-28T04:04:25.163277+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ION28/BLUESPAWN"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T04:44:27.645140+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "178b5d14aaee81823b3c9db30e5d6c84b05484f842274f5e1d57431a094fa75a", "fetched_at": "2026-08-28T04:04:25.163277+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ION28/BLUESPAWN"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T04:44:27.645140+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "178b5d14aaee81823b3c9db30e5d6c84b05484f842274f5e1d57431a094fa75a", "fetched_at": "2026-08-28T04:04:25.163277+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ION28/BLUESPAWN"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T04:44:27.645140+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "178b5d14aaee81823b3c9db30e5d6c84b05484f842274f5e1d57431a094fa75a", "fetched_at": "2026-08-28T04:04:25.163277+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ION28/BLUESPAWN"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 74, "longevity": 100, "rhythm": 45}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2654, "days_push": 156, "days_rel": 156, "gap_med": null, "n_releases_24m": 1}, "score": 69, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}