T1561.001 Disk Content Wipe
Sub-technique of T1561 Disk Wipe
Adversaries may erase the contents of storage devices on specific systems or in large numbers in a network to interrupt availability to system and network resources. Adversaries may partially or completely overwrite the contents of a storage device rendering the data irrecoverable through the storage interface.(Citation: Novetta Blockbuster)(Citation: Novetta Blockbuster Destructive…
Who uses it · with stories on Jábega
Sigma rules to hunt it
- Cisco File Deletionmediumtest · cisco
Rules from SigmaHQ · Detection Rule License 1.1. Technique from MITRE ATT&CK®.