Zendesk Ticket Attachment Deleted

Siddhant Mishra@Siddhant

•updated yesterday•0•0•0

Detects deletion of content within Zendesk. Removing attachments or tickets destroys the record of a support interaction, which is how a social engineering attempt that succeeded gets erased before anyone reviews how the attacker obtained what they did. Onboarding: ZENDESK is ingested via NXLog (Bloo extractor 831). Integration guide: https://bloo.io/docs/hypercloud/zendesk-connector BQL (Bloo Query Language): stream=documents where sourcename='ZENDESK' and action='DELETED' | groupby user, file, srcip, visibility