What early behavioral indicators of data exfiltration should our data loss prevention tools monitor to catch malicious insiders before they download proprietary source code from our GitHub repository?
Download run
Fan-out diagram
The searches the AI actually ran for this prompt.
SEED QUERY
What early behavioral indicators of data exfiltration should our data loss prevention tools monitor to catch malicious insiders before they download proprietary source code from our GitHub repository?
2 real searches · 1 real-search pass
Badge and edge weight = share of passes that produced the query. Hover a query for its intent and routing format.
Query classes
Google's semantic query class for every sub-query: what kind of answer each search is after, simulated vs real.
ChatGPT real searches (2)
Classes come from the query-classifier (a local Laya model). 2 of 2 calls are low-confidence (under 50%) — hover a query in the table to see its confidence.
Searches and sources
ChatGPT2 real searches · gpt-6
CISA insider threat mitigation behavioral indicators data exfiltration source code GitHub audit log monitoring Google ↗
GitHub enterprise audit log events repository clone personal access token SSH key documentation security monitoring Google ↗
- Common security incident investigation areas · docs.github.com
- Audit log events for your organization · docs.github.com
- Identifying audit log events performed by an access token · docs.github.com
- Responding to a security incident · docs.github.com
- Investigation tools for security incidents · docs.github.com
- Data-Driven Cyber Indicators of Malicious Insider Threat | · dhra.mil
- CYBERSECURITY & INFRASTRUCTURE · cisa.gov
- Reducing data exfiltration by malicious insiders · ncsc.gov.uk
Queries
2 queries · click a column to sort
| Query / type | Search | Intent | Query class | Routing format | Cluster | Freq ↓ | Weight |
|---|---|---|---|---|---|---|---|
CISA insider threat mitigation behavioral indicators data exfiltration source code GitHub audit log monitoring OBSERVED | Google ↗ AI Mode ↗ | — | Reason | — | — | 1x of 1 | |
GitHub enterprise audit log events repository clone personal access token SSH key documentation security monitoring OBSERVED | Google ↗ AI Mode ↗ | — | Reason | — | — | 1x of 1 |