T1213.003 Code Repositories
Sub-technique of T1213 Data from Information Repositories
Adversaries may leverage code repositories to collect valuable information. Code repositories are tools/services that store source code and automate software builds. They may be hosted internally or privately on third party sites such as Github, GitLab, SourceForge, and BitBucket. Users typically interact with code repositories through a web application or command-line utilities such as git.…
Who uses it · with stories on Jábega
Sigma rules to hunt it
- Bitbucket Unauthorized Full Data Export Triggeredcriticaltest · bitbucket
- Bitbucket Full Data Export Triggeredhightest · bitbucket
- Github Delete Action Invokedmediumtest · github
- Github Outside Collaborator Detectedmediumtest · github
Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.