GitHub Repo Clone - Time Series Anomly
'Attacker can exfiltrate data from your GitHub repository by cloning it. This hunting query tracks clone activities for each repository, allowing quick identification of anomalies/excessive clones to investigate repo access & permissions.'
Microsoft Sentinel (KQL)
