Forum Discussion
Hunt for "Delete specific folder"
Hi, i have a strange behavior - one some of my servers the Firewall Log folder is gone. It happens to Win2019 server - maybe related to that i accessed the folder - to get the log file and added ...
Even stranger, I am testing with a file in my c:\temp folder. The folder has not auditing set. MDE has create and rename events for it, but I didn't get any FileDeleted event for it.
that was my experience too 🙂 so it is not just me
- In my tenant at least, only EXE files generate a DeleteFile event