Evidence statusvalidated
What ThreatFade documents
ThreatFade uses hybrid encrypted/unencrypted signal extraction and statistical features such as rolling Shannon entropy and z-score deviation rather than treating encryption itself as proof of malicious activity.
Evidence boundary
Project validation is presented with its scope. Repository tests and author-confirmed scenarios do not establish universal accuracy, independent assurance, customer-scale performance or certification.