Rule Info
Name
BeyondTrust Secrets Utility Log File Deletion Attempt via CommandLine
Author
AzizFarghly (Nextron Systems)
Description
Detects deletion attempt of bt-secrets.log files.
Reference
Date
2026-10-23 00:00:00
Modified
None
Id
135b4324-6650-4530-a112-ff624516c05c
Tags
attack.stealth attack.t1070.004 cve.2026-102764
Type
Nextron Sigma feed only (private)
Rule History
Scan your endpoints, forensic images or collected files with our portable scanner THOR