danielmiessler/seclists

4%

new-account stargazers

BASELINE < 15%

Higher values can indicate many accounts were created shortly before starring.

7%

zero-activity accounts

BASELINE < 10%

A large share of accounts with no followers and no repositories can be a caution signal.

4

hourly velocity anomalies

BASELINE Z-SCORE > 3

Large one-hour surges versus the sample average can reflect unusual concentration.