TLDR Tech / Practical
Examining GitHub repository history integrity
This guide details how to scrutinize GitHub repository histories for signs of tampering by attackers who modify git logs or timestamps to hide malicious actions or fabricate credibility. It outlines a six-step forensic method that relies on independent server-side data, such as GitHub REST APIs, organization audit logs, and external registries like npm, to reconstruct the true sequence of events and identify compromised commits.
Read the full story