Linux File Deletion via rm, shred, or unlink

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•1•0•24

Detects file deletion using "rm", "shred" or "unlink" commands which are used often by adversaries to delete files left behind by the actions of their intrusion activity.