github

Expression

product = "github"

Fields

Field	Core	Detection	Informational
domain			✓
fallback_user_name
domain_user_name
user			✓

Activity Types

Activity Type	Field	Status	Core	Detection	Informational
app-activity	resource	Default			✓
	object	Default			✓
app-login	src_ip	Default		✓
	user_agent	Default			✓
branch-create	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
branch-modify	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
branch-protection-disable	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
branch-protection-enable	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
branch-protection-modify	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
configuration-mfa-enable	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
group-delete	resource
	additional_info
	user	Legacy	✓
	operation
	object
group-member-add	resource
	additional_info
	user	Legacy	✓	✓
	operation
	object
group-member-remove	resource
	additional_info
	user	Legacy	✓	✓
	operation
	object
group-modify	resource
	additional_info
	user	Legacy	✓
	operation
	object
group-repository-add	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
group-repository-remove	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
hook-create	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
hook-modify	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
log-download	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
repository-create	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
repository-delete	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
repository-member-add	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
repository-member-remove	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
repository-modify	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
repository-move	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
repository-pull	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
repository-push	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
repository-read	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
user-create	resource
	additional_info
	user	Legacy	✓	✓
	operation
	object
user-delete	resource
	additional_info
	user	Legacy	✓	✓
	operation
	object
user-invite	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
user-invite-cancel	resource	Default			✓
	additional_info	Default			✓
	user	Default		✓
	operation	Default			✓
	object	Default			✓
user-modify	resource
	additional_info
	user	Legacy	✓
	operation
	object