security-tools/sigma-rules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Add event dataset for missing rule in Github integration (#4278)

Browse Source
This commit is contained in:
shashank-elastic
2024-12-03 20:32:55 +05:30
committed by GitHub
parent 86cc61c233
commit 53cfeb76e3
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/integrations/github/impact_github_repository_deleted.toml
+2 -2
View File
@@ -2,7 +2,7 @@
creation_date = "2023/08/29"
integration = ["github"]
maturity = "production"
updated_date = "2024/11/27"
updated_date = "2024/12/03"
min_stack_version = "8.12.0"
min_stack_comments = "Breaking change at 8.12.0 for the Github Integration."
@@ -33,7 +33,7 @@ timestamp_override = "event.ingested"
type = "eql"
query = '''
configuration where event.module == "github" and event.action == "repo.destroy"
configuration where event.module == "github" and event.dataset == "github.audit" and event.action == "repo.destroy"
'''