https://research.splunk.com/endpoint/a203040e-f8fd-49bb-8424-d2fabf277322/
Detection: Windows ConsoleHost History File Deletion | Splunk Security Content
Apr 15, 2026 - Updated Date: 2026-04-15 ID: a203040e-f8fd-49bb-8424-d2fabf277322 Author: Teoderick Contreras, Splunk Type: Anomaly Product: Splunk Enterprise Security...
detection windowshistory filesplunk securitydeletioncontent