account_password_changedactivity_dashboard_events_by_actionactivity_dashboard_failed_login_trendsactivity_dashboard_failed_loginsactivity_dashboard_integration_summaryactivity_dashboard_mfa_activityactivity_dashboard_total_eventsgpg_key_createdgpg_key_deletedlogin_failed_attemptslogin_from_unrecognized_devicelogin_with_recovery_codemfa_disabledmfa_method_removedmfa_recovery_code_regeneratedoauth_app_authorization_createdoauth_app_authorization_destroyedpersonal_access_token_grantedssh_key_createdssh_key_deleted
Queries in GitHub Security Log Detections
The GitHub Security Log Detections mod includes 20 queries:
- account_password_changed
- activity_dashboard_events_by_action
- activity_dashboard_failed_login_trends
- activity_dashboard_failed_logins
- activity_dashboard_integration_summary
- activity_dashboard_mfa_activity
- activity_dashboard_total_events
- gpg_key_created
- gpg_key_deleted
- login_failed_attempts
- login_from_unrecognized_device
- login_with_recovery_code
- mfa_disabled
- mfa_method_removed
- mfa_recovery_code_regenerated
- oauth_app_authorization_created
- oauth_app_authorization_destroyed
- personal_access_token_granted
- ssh_key_created
- ssh_key_deleted