Detection rules › By event

GitHub-personal-access-token

Event	Rules
personal_access_token.access_granted	2
personal_access_token.access_revoked	1
personal_access_token.request_created	1

personal_access_token.access_granted

2 detection rules reference this event. View event page.

Elastic (1)

New GitHub Personal Access Token (PAT) Added severity low T1098, T1098.001, T1136, T1136.003, T1528

YARA-L (1)

GitHub Access Granted To Personal Access Token Followed By High Number Of Cloned Non Public Repositories severity high T1213, T1213.003

personal_access_token.access_revoked

1 detection rules reference this event. View event page.

Elastic (1)

GitHub PAT Access Revoked severity low building block T1531

personal_access_token.request_created

1 detection rules reference this event. View event page.

YARA-L (1)

GitHub Personal Access Token Created from Tor IP Address severity high T1098, T1098.001