Techniques
Sample rules
Cisco File Deletion
- source: sigma
- technicques:
- t1070
- t1070.004
- t1561
- t1561.001
- t1561.002
Description
See what files are being deleted from flash file systems
Detection logic
condition: keywords
keywords:
- erase
- delete
- format