SDelete

S0195

Tool.View on attack.mitre.org

About this tool

SDelete is an application that securely deletes data in a way that makes it unrecoverable. It is part of the Microsoft Sysinternals suite of tools.

Techniques used2

Procedure examples2

TechniqueProcedure example
T1070.004
File Deletion

SDelete deletes data in a way that makes it unrecoverable.

T1485
Data Destruction

SDelete deletes data in a way that makes it unrecoverable.

Groups that use it5

Campaigns0

None recorded.

References1

  1. Microsoft SDelete July 2016 Open source
    Russinovich, M. (2016, July 4). SDelete v2.0. Retrieved February 8, 2018.

Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.