Event ID - 3265

Event Id3265
SourceIntrusion
DescriptionHigh Security Alert:Too many files are being deleted from computer .
Event InformationThis event is logged by Eventcorrelator as part of the Default Security Alarm feature.
This is logged when Excessive file deletes detected for a specific computer.
It may be a normal deletes.
Generate a report using eventTracker console->view histroy->select event id 560 connections and select the involved computer name. Analyse the report from where file access is originated and who is the user.
Reference Links

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.