Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
This hunting query identifies GitHub activites its the first time a user deleted a repo that may be a sign of compromise.
| Attribute | Value |
|---|---|
| Type | Hunting Query |
| Solution | GitHub Only |
| ID | c3237d88-fdc4-4dee-8b90-118ded2c507c |
| Tactics | Impact |
| Techniques | T1485 |
| Source | View on GitHub |
This content item queries data from the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
GitHubAuditLogPolling_CL |
? | ✓ | ? |
GitHubAuditLogsV2_CL |
? | ✓ | ? |
GitHub_CL |
? | ✓ | ? |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊