Detection rules › Sigma
Sysmon Blocked File Shredding
Triggers on any Sysmon "FileBlockShredding" event, which indicates a violation of the configured shredding policy.
Event coverage
| Provider | Event ID | Title |
|---|---|---|
| Sysmon | 28 | FileBlockShredding |
Detection rules › Sigma
Triggers on any Sysmon "FileBlockShredding" event, which indicates a violation of the configured shredding policy.
| Provider | Event ID | Title |
|---|---|---|
| Sysmon | 28 | FileBlockShredding |
selection