GitHub Repo switched from private to public

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


This hunting query identifies GitHub activites where a repo was changed from private to public that may be a sign of compromise.

Attribute Value
Type Hunting Query
Solution GitHub Only
ID a6e2afd3-559c-4e88-a693-39c1f6789ef1
Tactics Collection
Techniques T1213
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
GitHubAuditLogPolling_CL ? ?
GitHubAuditLogsV2_CL ? ?
GitHub_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Hunting Queries