Skip to main content

GitHub repository deleted

ID:github_repository_deleted
Data type:GitHub
Severity:
Informational
MITRE ATT&CK:TA0040:T1485

Description

AlphaSOC detected the deletion of a GitHub repository. Repository deletion may indicate attempts to destroy data, including source code, documentation, or other critical assets stored in version control.

Impact

Deletion of GitHub repositories results in loss of source code, project history, documentation, and collaborative work. This disrupts development workflows, causes loss of intellectual property, and hampers business operations. Malicious actors use repository deletion to destroy evidence or cause organizational damage.

Severity

SeverityCondition
Informational
GitHub repository deleted

Investigation and Remediation

Review GitHub audit logs to identify the user account responsible for the deletion. Check for recent suspicious activities or unauthorized access to the account. Restore the repository or contact GitHub support for assistance. Implement repository protection rules to prevent unauthorized deletions. Review and revoke compromised credentials.

Further Reading