All Detections

GitHub First Time Repo Delete

Azure Sentinel@AzureSentinel
updated Jun 17, 20251015

'This hunting query identifies GitHub activites its the first time a user deleted a repo that may be a sign of compromise.'

Microsoft Sentinel (KQL)