Куда я попал?
SDelete
SDelete is an application that securely deletes data in a way that makes it unrecoverable. It is part of the Microsoft Sysinternals suite of tools. (Citation: Microsoft SDelete July 2016)
ID: S0195
Type: TOOL
Platforms: Windows
Version: 1.2
Created: 18 Apr 2018
Last Modified: 12 Aug 2020
Techniques Used |
||||
| Domain | ID | Name | Use | |
|---|---|---|---|---|
| Enterprise | T1070 | .004 | Indicator Removal: File Deletion |
SDelete deletes data in a way that makes it unrecoverable.(Citation: Microsoft SDelete July 2016) |
Groups That Use This Software |
||
| ID | Name | References |
|---|---|---|
| G0016 | APT29 |
(Citation: Mandiant No Easy Breach) |
| G0080 | Cobalt Group |
(Citation: PTSecurity Cobalt Dec 2016) |
| G0053 | FIN5 |
(Citation: Mandiant FIN5 GrrCON Oct 2016) |
| G0091 | Silence |
(Citation: Group IB Silence Sept 2018) |
References
- Russinovich, M. (2016, July 4). SDelete v2.0. Retrieved February 8, 2018.
- Dunwoody, M. and Carr, N.. (2016, September 27). No Easy Breach DerbyCon 2016. Retrieved October 4, 2016.
- Group-IB. (2018, September). Silence: Moving Into the Darkside. Retrieved May 5, 2020.
- Bromiley, M. and Lewis, P. (2016, October 7). Attacking the Hospitality and Gaming Industries: Tracking an Attacker Around the World in 7 Years. Retrieved October 6, 2017.
- Positive Technologies. (2016, December 16). Cobalt Snatch. Retrieved October 9, 2018.
Мы используем cookie-файлы, чтобы получить статистику, которая помогает нам улучшить сервис для вас с целью персонализации сервисов и предложений. Вы может прочитать подробнее о cookie-файлах или изменить настройки браузера. Продолжая пользоваться сайтом, вы даёте согласие на использование ваших cookie-файлов и соглашаетесь с Политикой обработки персональных данных.