IIS WebServer Access Logs Deleted — Detection Rule
Detects the deletion of IIS WebServer access logs which may indicate an attempt to destroy forensic evidence
Detects the deletion of IIS WebServer access logs which may indicate an attempt to destroy forensic evidence