Github High Risk Configuration Disabled

Rule Info

Name
Github High Risk Configuration Disabled
Author
Muhammad Faisal (@faisalusuf)
Description
Detects when a user disables a critical security feature for an organization.
Reference
https://docs.github.com/en/organizations/managing-oauth-access-to-your-organizations-data/disabling-oauth-app-access-restrictions-for-your-organization
Date
2023-01-29 00:00:00
Modified
None
Id
8622c92d-c00e-463c-b09d-fd06166f6794
Tags
attack.credential_access attack.defense_evasion attack.persistence attack.t1556 DEMO
Type
Community Rule
Link to Public Repo
https://github.com/SigmaHQ/sigma/search?q=8622c92d-c00e-463c-b09d-fd06166f6794

Rule History

Author
Title
Date
Commit
Nasreddine Bencherchali
Merge PR #4738 from @nasbench - Small fixes and metadata updates
2024-02-26
8af1ab8ca
github-actions[bot]
Merge PR #4611 from @nasbench - Promote Older Rules Status From `experimental` To `test`
2023-12-01
ae960f088
Nasreddine Bencherchali
Merge PR #4482 From @nasbench - Add New Automation Workflows
2023-10-18
95793d73b
Nasreddine Bencherchali
fix: update metadata and prefix test
2023-01-30
6de8009c8
z00t
Update and rename github_high_risk_configuration_change.yml to disable_github_high_risk_configuration.yml
2023-01-29
493daf54f
z00t
Update rules/cloud/github/github_high_risk_configuration_change.yml
2023-01-29
579ac60b7
z00t
selection item added.
2023-01-29
60c3221fe
THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022