Microsoft Sentinel Adds GitHub Code Repository Monitoring -- Redmondmag.com

Microsoft Sentinel Adds GitHub Code Repository Monitoring

By Kurt Mackie
02/02/2022

Microsoft announced on Wednesday that it's now possible to use Microsoft Sentinel to continuously monitor GitHub developer repositories for possible adverse activities.

Sentinel is Microsoft's security information and event management (SIEM) service. It now has a "Continuous Threat Monitoring for GitHub" capability that can be set up using Sentinel's "Content Hub," which appears to be at the preview stage. It's also possible to set up this feature in Sentinel using a "GitHub access token," per the announcement.

Essentially, Microsoft is adding a connector that taps the audit log of GitHub, a code repository for developers that's owned by Microsoft. This arrangement permits Sentinel users get various alerts on certain activities. Sentinel users also get a dashboard view of various GitHub use stats

For instance, Sentinel users can get alerts about when a GitHub repository was created or destroyed. They also can get information about when "a payment method was removed" or when an OAuth application's client secret was removed.

Microsoft includes a "workbook that visualizes the data" as well, which comes with some "out-of-the-box content" from Microsoft. The workbook can be used to graphically show things like GitHub code forks over time, for instance. Charts generated through the workbook are based on Kusto Query Language queries, which can be customized.

Organizations wanting to use Sentinel to monitor GitHub repositories need to carry out some steps first to "connect the GitHub connector to the Microsoft Sentinel environment," as described in the announcement.

About the Author

Kurt Mackie is senior news producer for 1105 Media's Converge360 group.

Featured

Multi-Tenant Organization Hooks Released for Microsoft 365

Microsoft Entra ID's new multi-tenant organization capabilities have reached general availability (GA).
Real-World Ransomware Recovery

Here's how I was (mostly) successful in recovering a family PC infected with malware.
Microsoft Launches Small AI Models Family Phi-3

Recognizing that bigger isn't always better, Microsoft has released its smallest open AI models to date, Phi-3.
Microsoft and OpenAI Continue Global AI Expansions

Microsoft and OpenAI each continued their global expansion this month, with the announcements of new infrastructure investments and service rollouts in new regions, like Asia and the Middle East.
Cisco Warns of Brute Force Attacks Targeting VPNs and Firewalls

Cisco has revealed that a global increase in brute force attacks targeting Virtual Private Networks (VPNs) and other devices is currently taking place.