Monitoring for Suspicious GitHub Activity with Google Security Operations

By David-French: "In this two-part blog series, I’m going to demonstrate how a security team can use the Google Security Operations platform to proactively monitor for and detect suspicious and notable behaviors in their GitHub Enterprise environment. Part one will walk through the process of ingesting GitHub audit logs in Google Security Operations. In part two, I’ll provide details on the 26 rules that we’ve shared to help security teams get started with monitoring their GitHub environment. I’ll …

audit audit logs behaviors blog blueteamsec can detect enterprise environment french github google google security google security operations logs monitor monitoring operations platform process security security operations security operations platform security team series team