Not able to monitor uploads to GitHub with Symantec DLP

Products

• Data Loss Prevention

Issue/Introduction

Data Loss Prevention (DLP)
Network Prevent for Web

Data uploaded to GitHub is not being monitored.
No incidents are being created.

 

Environment

Release : Any current version

Component : Network Prevent for Web

Cause

The policy Recipient Pattern URL domain list had "github.com" added.
Github does not upload data to github.com.

Resolution

Github uploads the data to an amazonaws.com domain.
Add the correct domain to monitor GitHub.

Example:

"github-production-upload-manifest-file-XXXXXX.s3.amazonaws.com"

The manifest number, XXXXXX in this example, will vary for your uploads.
Add the correct domain for your company.

At this time, there is no option to use a wildcard in the domain URL.

Example:

"github-production-upload-manifest-file-*.s3.amazonaws.com"