GitHub Audit¶
Cyderes supports the ingestion of organization or enterprise audit logs from GitHub. GitHub is a provider for internet hosting software development and version control. To learn more about the types of audit logs GitHub provides, visit this guide. Audit logs are obtained via the GitHub REST API.
For more information regarding the GitHub API, please reference the Organization Audit Logs or the Enterprise Admin Audit Logs documentation.
Chronicle Data Types¶
- GITHUB
Requirements¶
For the REST API, a personal access token needs to be configured, and it requires the admin:org
and read:audit_log
scopes.
Refer to this guide for directions on how to create a personal access token.
Note
The GitHub Personal Access Token must be authorized with your organization's SSO. Please refer to this guide.
Note
This integration requires Github Enterprise Cloud licensing.
Gather Information¶
Please send the following to Cyderes when setup is completed:
- Organization OR Enterprise Name
- Personal Access Token