Elastic low stable eql

GitHub User Blocked From Organization

A GitHub user was blocked from access to an organization.

View Source

Detection Logic

configuration where event.dataset == "github.audit" and event.action == "org.block_user"

Field Validations

Loading…

Comments (0)

Loading comments...