Pages Protected Domain

actionDescriptionSampleRule
pages_protected_domain.createA GitHub Pages verified domain was created for an organization or enterprise.YN
pages_protected_domain.deleteA GitHub Pages verified domain was deleted from an organization or enterprise.YN
pages_protected_domain.verifyA GitHub Pages domain was verified for an organization or enterprise.YN

pages_protected_domain.create

#
Category
pages-protected-domain

Description

A GitHub Pages verified domain was created for an organization or enterprise.

Documented on GitHub's enterprise audit log reference.

Example Audit Log Entry #

{
  "@timestamp": 1772349218505,
  "_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAxNg==",
  "action": "pages_protected_domain.create",
  "actor": "user",
  "actor_id": 9000002,
  "created_at": 1772349218505,
  "domain": "example.com",
  "operation_type": "create",
  "org_id": null,
  "owner": "user",
  "owner_type": "User",
  "request_access_security_header": null,
  "request_id": "E3F6:A5520:1E4BB1:1EF7D4:69A3E718",
  "state": "unverified",
  "user_agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.3 Mobile/15E148 Safari/604.1"
}

References #

pages_protected_domain.delete

#
Category
pages-protected-domain

Description

A GitHub Pages verified domain was deleted from an organization or enterprise.

Documented on GitHub's enterprise audit log reference.

Example Audit Log Entry #

{
  "@timestamp": 1773097692183,
  "_document_id": "U1lOX0RPQ18wMDAwMDAwMDAwMDAxNw==",
  "action": "pages_protected_domain.delete",
  "actor": "user",
  "actor_id": 9000002,
  "created_at": 1773097692183,
  "domain": "example.com",
  "operation_type": "remove",
  "org_id": null,
  "owner": "user",
  "owner_type": "User",
  "request_access_security_header": null,
  "request_id": "C008:FCC43:34148F:4646A3:69AF52D3",
  "state": "pending",
  "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:148.0) Gecko/20100101 Firefox/148.0"
}

References #

pages_protected_domain.verify

#
Category
pages-protected-domain

Description

A GitHub Pages domain was verified for an organization or enterprise.

Documented on GitHub's enterprise audit log reference.

Example Audit Log Entry #

{
  "org_id": 9000008,
  "created_at": 1785189525343.0,
  "business_id": 9000005,
  "owner": "example-business-1",
  "state": "verified",
  "action": "pages_protected_domain.verify",
  "domain": "example.com",
  "business": "example-business",
  "owner_type": "User",
  "operation_type": "modify"
}

References #