Partition Table Removal via DeviceIoControl IOCTL_DISK_CREATE_DISK

Duo Tech@duotech

•updated Jul 21, 2026•0•0•1

Detects strings associated with GigaWiper's unallocateDrive routine, which invokes DeviceIoControl with the IOCTL_DISK_CREATE_DISK control code to erase partition table metadata on non-system drives, followed by a success log message.