Local git history rewrite via filter-branch, rebase -i, or force-push

Ethan Andrews@eandrews

•updated Jul 6, 2026•6•0•7

Detects the use of Git commands (filter-branch, rebase -i, or force-push) that rewrite local or remote commit history. These operations are often used by adversaries to hide malicious code injections, remove evidence of unauthorized changes, or manipulate developer repository integrity.