Mass File Deletion or System Wipe Commands (CHOSEN BRICK-style)

Ibrahim Saud@tektrix

•updated Sep 22, 2026•0•0•2

Detects the use of built-in Windows utilities and commands to disable system recovery features, delete volume shadow copies, clear backup catalogs, or perform mass file deletion. This behavior is highly indicative of wiper malware preparing for a destructive attack by preventing system recovery.