AI coding agent git checkout via plugin install (Plugin4Shell)
Detects the execution of git checkout commands initiated by known AI-powered coding assistants or CLI tools. This behavior may indicate an AI agent or automated script interacting with source code repositories in an unexpected or potentially unauthorized manner.
Microsoft Sentinel (KQL)

