| Event Id | 3265 |
| Source | Intrusion |
| Description | High Security Alert:Too many files are being deleted from computer |
| Event Information | This event is logged by Eventcorrelator as part of the Default Security Alarm feature. This is logged when Excessive file deletes detected for a specific computer. It may be a normal deletes. Generate a report using eventTracker console->view histroy->select event id 560 connections and select the involved computer name. Analyse the report from where file access is originated and who is the user. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.