GitHub audit logs
Named by 2 kept items in this workspace.
Search every workspace for GitHub audit logs. It matches the name as written, so it can find other things that share it.
The items that name it 2
Used to identify git.clone activity, establish user baselines, and reconstruct attack timeline
Used to correlate git push activity back to the initially compromised endpoint, including IP logging
All technologies in this workspace.