attack.t1567.001 | Detection.FYI

GitHub Repository Pages Site Changed to Public

Nov 3, 2025 · attack.collection attack.exfiltration attack.t1567.001 ·
Share on:

Detects when a GitHub Pages site of a repository is made public. This usually is part of a publishing process but could indicate or lead to potential unauthorized exposure of sensitive information or code.

Read More
Network Connection Initiated To DevTunnels Domain

Jul 30, 2025 · attack.exfiltration attack.command-and-control attack.t1567.001 attack.t1572 ·
Share on:

Detects network connections to Devtunnels domains initiated by a process on a system. Attackers can abuse that feature to establish a reverse shell or persistence on a machine.

Read More