Windows native backup deletion

Detects scenarios where an attacker attempts to delete existing Windows native backup (only available on Windows Server).