Forum Discussion

Copper Contributor

Nov 19, 2021

Unusual volume of file deletion

I have recently started receiving a lot of Unusual volume of file deletion alerts that point to a users \AppData-Local,\AppData-Roaming paths, and deletions that appear to be related to application u...

data loss prevention

information protection and governance

microsoft information governance

VasilMichev

MVP

Nov 19, 2021

Nah, they've been around for years, you probably haven't run into them yet. If you are using MCAS (Defender for cloud), you can disable this policy and replace it with a more robust one, if it's creating too much noise.

TracMora

Copper Contributor

Nov 19, 2021

VasilMichev

Thanks for the prompt response, I will take a look. This just seems to have started for me on November 10th. It is noisy.