Two Factor Authentication
| action | Description | Sample | Rule |
|---|---|---|---|
| two_ | A secondary authentication factor was added to a user account. | N | N |
| two_ | Two-factor authentication was disabled for a user account. | N | N |
| two_ | Two-factor authentication was enabled for a user account. | N | N |
| two_ | A one-time password code was sent to a user account fallback phone number. | N | N |
| two_ | Two factor recovery codes were regenerated for a user account. | N | N |
| two_ | A secondary authentication factor was removed from a user account. | N | N |
| two_ | A one-time password code was sent to a user account fallback phone number. | N | N |
| two_ | The two-factor authentication fallback for a user account was changed. | N | N |
two_factor_authentication.add_factor
#Description
A secondary authentication factor was added to a user account.
Documented on GitHub's user audit log reference.
two_factor_authentication.disabled
#Description
Two-factor authentication was disabled for a user account.
Documented on GitHub's user audit log reference.
two_factor_authentication.enabled
#Description
Two-factor authentication was enabled for a user account.
Documented on GitHub's user audit log reference.
two_factor_authentication.password_reset_fallback_sms
#Description
A one-time password code was sent to a user account fallback phone number.
Documented on GitHub's user audit log reference.
two_factor_authentication.recovery_codes_regenerated
#Description
Two factor recovery codes were regenerated for a user account.
Documented on GitHub's user audit log reference.
two_factor_authentication.remove_factor
#Description
A secondary authentication factor was removed from a user account.
Documented on GitHub's user audit log reference.
two_factor_authentication.sign_in_fallback_sms
#Description
A one-time password code was sent to a user account fallback phone number.
Documented on GitHub's user audit log reference.
two_factor_authentication.update_fallback
#Description
The two-factor authentication fallback for a user account was changed.
Documented on GitHub's user audit log reference.