Most Significant ShinyHunters 2026: Salesforce Bulk Query Job Deletion Following Data Export (Anti-Forensic Cleanup)
Detects anomalous anti-forensic behavior where a Salesforce Bulk API query job is deleted shortly after its creation or completion. This sequence is often associated with efforts to obscure data exfiltration activities by removing the metadata trail of bulk data exports.
Microsoft Sentinel (KQL)
