AI Plugin Git Repository Takeover / Unauthorized Push Activity

Ibrahim Saud@tektrix

•updated 21 days ago•0•0•6

This rule detects potentially suspicious activity within a Git repository environment, specifically monitoring for code pushes, administrative changes (such as added collaborators, permission changes, or ownership transfers), and force push operations. It identifies high-impact repository modifications that could indicate unauthorized access, persistence, or attempts to disrupt repository integrity.