Detects actions that clear the local ShimCache and remove forensic evidence
Read the full analysis on IntelFusions