Bulk User Deletion Activity

Ankit Mehta@Secvyn

•updated Jun 30, 2026•0•0•0

Detects when five or more user accounts are deleted within a one-hour period by a single user. This activity can indicate malicious intent to disrupt operations or cover tracks.