Home/ MITRE Matrix/ Collection/ T1213.003

T1213.003Code Repositories

T1213.003 — Code Repositories is a MITRE ATT&CK technique in the Collection tactic. Clankerusecase tracks 5 detection use cases covering it and 2 threat-intel articles citing it.

Collection

View on the matrix → Filter Detection Library MITRE official spec ↗

5Use cases

2Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1213 · Data from Information Repositories

Use cases covering this technique (5)

GitHub repository visibility changed to public Internal actions · alerting DD GitLab mass repository download Internal actions · alerting DD GitLab project visibility changed (public) Internal actions · alerting DD [LLM] GitHub audit log bulk private-repo clone burst (post Nx Console compromise pattern) Bespoke actions · alerting DSPDD [LLM] Bun/Node bursty PUT to api.github.com /contents from infected host (Sha1-Hulud exfil) Bespoke actions · alerting DSPDDCS

Articles citing this technique (2)

crit 5 Supply Chain Attacks in 48 Hours: Why Securing One Layer Is Not Enough art-230

high Sha1-Hulud: The Second Coming - Zapier, ENS Domains, and Other Prominent NPM Packages Compromised art-653