File Deletion via rm Command in Web Request

Darshan Thummar@Mighty

•updated Jun 10, 2026•0•0•6

This rule detects attempts to delete files or directories using the 'rm -rf' command within a web request URI. This often indicates an attacker attempting to clean up traces of their activity or cause denial of service by removing critical files on a compromised web server.