Sysmon · xml
Sysmon 23 — File deletion archived
Sysmon records file deletion archived through its Windows Operational channel.
Log sources tagged file-deletion-archived
Log sources tagged file-deletion-archived. Browse source profiles associated with file-deletion-archived.