Potential Secure Deletion with SDelete (39a80702-d7ca-4a83-b776-525b1f86a36d)

Detects files that have extensions commonly seen while SDelete is used to wipe files.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
File Deletion - T1070.004 (d63a3fb8-9452-4e9d-a60a-54be68d5998c)	Attack Pattern	Potential Secure Deletion with SDelete (39a80702-d7ca-4a83-b776-525b1f86a36d)	Sigma-Rules	1
Indicator Removal from Tools - T1027.005 (b0533c6e-8fea-4788-874f-b799cacc4b92)	Attack Pattern	Potential Secure Deletion with SDelete (39a80702-d7ca-4a83-b776-525b1f86a36d)	Sigma-Rules	1
Data Destruction - T1485 (d45a3d09-b3cf-48f4-9f0f-f521ee5cb05c)	Attack Pattern	Potential Secure Deletion with SDelete (39a80702-d7ca-4a83-b776-525b1f86a36d)	Sigma-Rules	1
Potential Secure Deletion with SDelete (39a80702-d7ca-4a83-b776-525b1f86a36d)	Sigma-Rules	Code Signing - T1553.002 (32901740-b42c-4fdd-bc02-345b5dc57082)	Attack Pattern	1
File Deletion - T1070.004 (d63a3fb8-9452-4e9d-a60a-54be68d5998c)	Attack Pattern	Indicator Removal - T1070 (799ace7f-e227-4411-baa0-8868704f2a69)	Attack Pattern	2
Indicator Removal from Tools - T1027.005 (b0533c6e-8fea-4788-874f-b799cacc4b92)	Attack Pattern	Obfuscated Files or Information - T1027 (b3d682b6-98f2-4fb0-aa3b-b4df007ca70a)	Attack Pattern	2
Subvert Trust Controls - T1553 (b83e166d-13d7-4b52-8677-dff90c548fd7)	Attack Pattern	Code Signing - T1553.002 (32901740-b42c-4fdd-bc02-345b5dc57082)	Attack Pattern	2