LONGLEASH self-deletion of binary after tamper detection
Detects a process attempting to delete its own executable file on disk. This is a common anti-forensic technique used by malware to hinder investigation and remove traces of its presence after execution.
Microsoft Sentinel (KQL)
