Browse Rules

Search and filter across all detection sources

906 rules

panther high python

GitHub Action Failed

A monitored github action has failed.

panther low python

GitHub Security Change, includes GitHub Advanced Security

The rule alerts when GitHub Security tools (Dependabot, Secret Scanner, etc) are disabled.

panther medium python

Github Public Repository Created

A public Github repository was created.

sagan low other

Github device detected

Github device detected

panther informational python

DEPRECATED - GitHub Web Hook Modified

Deprecated. See GitHub.Webhook.Modified instead.

panther medium python

GitHub Secret Scanning Alert Created

GitHub detected a secret and created a secret scanning alert.

sagan medium other

[GITHUB] Item Added

[GITHUB] Item Added

sagan medium other

[GITHUB] Item Create

[GITHUB] Item Create

sagan medium other

[GITHUB] Item Created

[GITHUB] Item Created

sagan medium other

[GITHUB] Item Deleted

[GITHUB] Item Deleted

sagan medium other

[GITHUB] Item Edited

[GITHUB] Item Edited

sagan medium other

[GITHUB] Item Renamed

[GITHUB] Item Renamed

sagan medium other

[GITHUB] Item Resolved

[GITHUB] Item Resolved

sagan medium other

[GITHUB] Member Added

[GITHUB] Member Added

sagan medium other

[GITHUB] Member Invited

[GITHUB] Member Invited

sagan medium other

[GITHUB] Member Removed

[GITHUB] Member Removed

sagan medium other

[GITHUB] Release Detected

[GITHUB] Release Detected

sagan medium other

[GITHUB] Repository Archived

[GITHUB] Repository Archived

sagan medium other

[GITHUB] Repository Prereleased

[GITHUB] Repository Prereleased

sagan medium other

[GITHUB] Repository Published

[GITHUB] Repository Published

sagan medium other

[GITHUB] Repository Removed

[GITHUB] Repository Removed

sagan medium other

[GITHUB] Status Event

[GITHUB] Status Event

panther informational python

GitHub User Access Key Created

Detects when a GitHub user access key is created.

panther medium python

GitHub Org IP Allow List modified

Detects changes to a GitHub Org IP Allow List

chronicle high yara-l

GitHub Enterprise Deleted

Detects when a GitHub enterprise is deleted.