SSH Certificate Authority

action	Description	Sample	Rule
ssh_certificate_authority.create	An SSH certificate authority for an organization or enterprise was created.	N	Y
ssh_certificate_authority.destroy	An SSH certificate authority for an organization or enterprise was deleted.	N	N

ssh_certificate_authority.create

An SSH certificate authority for an organization or enterprise was created.

Documented on GitHub's enterprise audit log reference.

Github SSH Certificate Configuration Changed source medium: Detects when changes are made to the SSH certificate configuration of the organization.T1078, T1078.004

An SSH certificate authority for an organization or enterprise was deleted.

Documented on GitHub's enterprise audit log reference.