ATT&CK technique
View on MITRE ATT&CK →
T1213.003
Code Repositories
Collection
9 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Potential Secret Scanning via Gitleaks | production | 2026-09-18 |
| elastic | High Number of Cloned GitHub Repos From PAT | production | 2026-09-18 |
| elastic | Github Activity on a Private Repository from an Unusual IP | production | 2026-09-18 |
| elastic | GitHub Exfiltration via High Number of Repository Clones by User | production | 2026-09-18 |
| sigma | Github Delete Action Invoked | test | 2026-03-09 |
| sigma | Bitbucket Full Data Export Triggered | test | 2024-02-25 |
| sigma | Bitbucket Unauthorized Full Data Export Triggered | test | 2024-02-25 |
| sigma | Github Self Hosted Runner Changes Detected | test | 2023-01-27 |
| sigma | Github Outside Collaborator Detected | test | 2023-01-20 |