Mass File Deletion Activity

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•6

Detects instances where a significant number of files (50 or more) are deleted on a device within a 5-minute window. This can indicate malicious activity such as ransomware, data destruction, or an attacker attempting to cover their tracks.