GitHub Member Invited to Organisation
Detects an invitation into a GitHub organisation. Membership confers access to private source and, depending on role, the ability to alter it. An unexpected invitation is a supply chain risk: the attacker does not need to breach anything if somebody adds them to the organisation. Onboarding: GITHUB is ingested via GitHub connector (Bloo extractor 870). Integration guide: https://bloo.io/docs/hypercloud/github-connector BQL (Bloo Query Language): stream=iam where sourcename='GITHUB' and action='MEMBER_INVITED' | groupby target, role, organisationid, accesstype
Sigma

