File Deleted Via Sysinternals SDelete — Detection Rule

Detects the deletion of files by the Sysinternals SDelete utility. It looks for the common name pattern used to rename files.

Read the full analysis on IntelFusions