SSH Certificate Requirement
| action | Description | Sample | Rule |
|---|---|---|---|
| ssh_ | The requirement for members to use SSH certificates to access an organization resources was disabled. | N | Y |
| ssh_ | The requirement for members to use SSH certificates to access an organization resources was enabled. | N | N |
ssh_certificate_requirement.disable
#Description
The requirement for members to use SSH certificates to access an organization resources was disabled.
Documented on GitHub's enterprise audit log reference. Full rule details for this event, including ATT&CK technique mappings and native queries →Detection Rules #
Sigma #
T1078, T1078.004
ssh_certificate_requirement.enable
#Description
The requirement for members to use SSH certificates to access an organization resources was enabled.
Documented on GitHub's enterprise audit log reference.