Renamed Sysinternals Sdelete Execution — Detection Rule
Detects the use of a renamed SysInternals Sdelete, which is something an administrator shouldn't do (the renaming)
Detects the use of a renamed SysInternals Sdelete, which is something an administrator shouldn't do (the renaming)