Attack Prevalence Index

Author: ARIAtrap. Cadence: live. Data source: AgentPwn payload callbacks and TrapMyAgent fleet canaries classified into Threat Matrix techniques via the registry evidence bridge.

Methodology: /methodology/behavioral-sweep

No classified attack evidence in the last 30 days. The fleet is emitting telemetry; classification populates the index as agents follow injections. The first published value will be cited in the corresponding Behavioral Threat Report.

What this index measures

  • Total observed attack sessions per reporting window with a ninety-five-percent confidence interval.
  • Distribution of observations across Threat Matrix techniques. Every observation maps to exactly one primary T-NNNN code; no per-product taxonomies.
  • Partition by fleet coverage class (baseline, authenticated, dynamic, social) so the Common-Crawl-gap delta is visible.
  • Cross-property correlation rate, sessions where the same fingerprint appears on multiple fleet properties within the attribution window. Cross-property reasoning events are the highest-signal class.

See also