T1593.003

Code Repositories

Adversaries may search public code repositories for information about victims that can be used during targeting. Victims may store code in repositories on various third-party websites such as GitHub, GitLab, SourceForge, and BitBucket. Users typically interact with code repositories through a web application or command-line utilities such as git. Adversaries may search various public code repositories for various information about a victim. Public code repositories can often be a source of va...

PRE

Detections

Sources

Threat Actors

BY SOURCE

2sigma

PROCEDURES (1)

Process Creation Monitoring2 detections

Auto-extracted: 2 detections for process creation monitoring

THREAT ACTORS (3)

Contagious Interview HAFNIUM LAPSUS$

DETECTIONS (2)

Suspicious Git Clone

sigmamedium

Suspicious Git Clone - Linux

sigmamedium