GitHub OAuth App Restrictions Disabled

'This hunting query identifies GitHub OAuth Apps that have restrictions disabled that may be a sign of compromise. Attacker will want to disable such security tools in order to go undetected. '

Microsoft Sentinel (KQL)