Elastic low stable eql

GitHub PAT Access Revoked

Access to private GitHub organization resources was revoked for a PAT.

View Source

Detection Logic

configuration where event.dataset == "github.audit" and event.action == "personal_access_token.access_revoked"

Field Validations

Loading…

Comments (0)

Loading comments...