Query: MFA Activity

select
  action,
  count(*) as total_events
from
  github_security_log
where
  action like 'two_factor_authentication.%'
group by
  action
order by
  total_events desc;