{"adoption": {"forks": 520, "observed_at": "2026-08-28T04:07:12.064315+00:00", "stars": 2716}, "canonical_url": "https://ross.abutalabs.com/products/openedr", "card": {"archived": false, "artifact_type": "application", "description": "Open EDR public repository", "domain": ["security", "developer-tools", "monitoring"], "enriched": true, "function": ["security", "monitoring", "logging", "alerting"], "health_score": 70, "homepage": null, "language": "C++", "license": "NOASSERTION", "license_family": "other", "maturity": "active", "member_repos": ["ComodoSecurity/openedr"], "name": "ComodoSecurity/openedr", "platform": ["windows", "cpp"], "pushed_at": "2026-05-23T23:36:21+00:00", "repo": "ComodoSecurity/openedr", "stars": 2716, "tags": ["edr", "endpoint-security", "telemetry", "breach-detection", "elasticsearch", "xdr"], "topics": [], "urls": [], "use_cases": ["detect breaches on endpoints", "monitor endpoint telemetry in real time", "perform root cause analysis of security incidents", "track process hierarchy and file trajectory on Windows machines", "forward endpoint events to Elasticsearch", "map endpoint activity to MITRE ATT&CK framework"], "what_it_is": "OpenEDR is an open-source Endpoint Detection and Response (EDR) agent written in C++ that records endpoint telemetry, process hierarchies, file/device trajectories, and hashes locally. It forwards collected security events to locally or cloud-hosted Elasticsearch deployments for real-time visibility, breach detection, and root-cause analysis.", "when_to_avoid": ["you need a turnkey EDR with polished console and easy deployment out of the box", "you need cross-platform agents for Linux or macOS", "your organization requires commercial support and SLAs", "you want a lightweight agent with minimal resource footprint"], "when_to_choose": ["you need a free, open-source EDR agent for Windows endpoints", "you already run Elasticsearch and want endpoint telemetry piped into it", "you want granular base-security-event visibility for threat hunting", "you prefer to self-host your endpoint security data"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/openedr", "repo": "ComodoSecurity/openedr", "role": "main", "score": 60}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:07:12.064315+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T02:15:20.936980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "e3f28f8f6fecf421dee2288a74e471f29e0e99eb46c3eccfe712f25f700d2144", "fetched_at": "2026-08-28T04:07:12.064315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ComodoSecurity/openedr"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:07:12.064315+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T02:15:20.936980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "e3f28f8f6fecf421dee2288a74e471f29e0e99eb46c3eccfe712f25f700d2144", "fetched_at": "2026-08-28T04:07:12.064315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ComodoSecurity/openedr"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T02:15:20.936980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "e3f28f8f6fecf421dee2288a74e471f29e0e99eb46c3eccfe712f25f700d2144", "fetched_at": "2026-08-28T04:07:12.064315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ComodoSecurity/openedr"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:07:12.064315+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:07:12.064315+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:07:12.064315+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T02:15:20.936980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "e3f28f8f6fecf421dee2288a74e471f29e0e99eb46c3eccfe712f25f700d2144", "fetched_at": "2026-08-28T04:07:12.064315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ComodoSecurity/openedr"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:07:12.064315+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:07:12.064315+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T02:15:20.936980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "e3f28f8f6fecf421dee2288a74e471f29e0e99eb46c3eccfe712f25f700d2144", "fetched_at": "2026-08-28T04:07:12.064315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ComodoSecurity/openedr"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:07:12.064315+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:07:12.064315+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:07:12.064315+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T02:15:20.936980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "e3f28f8f6fecf421dee2288a74e471f29e0e99eb46c3eccfe712f25f700d2144", "fetched_at": "2026-08-28T04:07:12.064315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ComodoSecurity/openedr"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:07:12.064315+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:07:12.064315+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T02:15:20.936980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "e3f28f8f6fecf421dee2288a74e471f29e0e99eb46c3eccfe712f25f700d2144", "fetched_at": "2026-08-28T04:07:12.064315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ComodoSecurity/openedr"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T02:15:20.936980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "e3f28f8f6fecf421dee2288a74e471f29e0e99eb46c3eccfe712f25f700d2144", "fetched_at": "2026-08-28T04:07:12.064315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ComodoSecurity/openedr"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T02:15:20.936980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "e3f28f8f6fecf421dee2288a74e471f29e0e99eb46c3eccfe712f25f700d2144", "fetched_at": "2026-08-28T04:07:12.064315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ComodoSecurity/openedr"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T02:15:20.936980+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "e3f28f8f6fecf421dee2288a74e471f29e0e99eb46c3eccfe712f25f700d2144", "fetched_at": "2026-08-28T04:07:12.064315+00:00", "kind": "readme", "missing": false, "url": "https://github.com/ComodoSecurity/openedr"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 83, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-03T02:20:16.233290+00:00", "flags": ["no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2135, "days_push": 102, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 60, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}