Suspicious Writes To Windows Recycle Bin
This search detects writes to the recycle bin by a process other than explorer.exe.
This content is not mapped to any local saved search. Add mapping
Suspicious Writes To Windows Recycle Bin Help
To successfully implement this search you need to be ingesting information on filesystem and process logs responsible for the changes from your endpoints into the
Open in Search