oss-forensics

Supply chain forensics involves examining a GitHub repository's local git history, querying the GitHub API, and checking the Wayback Machine to identify compromised dependencies or injected malicious code.

Yes, you can recover deleted commits from a GitHub repository. The investigation process analyzes local git data and historical archives to retrieve and examine the contents of deleted commits.

IOC extraction in open source security is the process of gathering Indicators of Compromise from various data sources within a repository to identify potential malicious activity and supply chain attacks.

Yes, GitHub repository forensics can use BigQuery for analysis. The investigation framework integrates BigQuery alongside local git analysis and the GitHub API for comprehensive parallel data collection.

Yes, you need multiple sub-agents for GitHub supply chain forensics. The framework requires multiple sub-agents to handle parallel data collection and verification across different sources like the GitHub API and Wayback Machine.

You need open source supply chain forensics when a repository has been reported for a potential supply chain attack, allowing you to systematically investigate the repository, recover deleted commits, and identify suspicious activity.