History File Deletion — Detection Rule

Detects events in which a history file gets deleted, e.g. the ~/bash_history to remove traces of malicious activity

Read the full analysis on IntelFusions