An NHS Trust reused a script, pointed it at the wrong database, and overwrote 11 years of records. The data was restored. The log of who had viewed it was not, and that was the part an investigation needed. Read the filing #auditlogs #changecontrol #backups #infosec

Threat hunting in GitHub audit logs can reveal compromised accounts, stolen tokens, OAuth abuse, and API enumeration before source code or secrets are exfiltrated. #GitHub #OAuth #AuditLogs