AWS DeleteBucket
Permanently deletes an S3 bucket; the bucket must be empty before deletion can succeed.
T1485: Data Destruction
T1485: Data Destruction
Adversaries may destroy data and files on specific systems or in large numbers on a network to interrupt availability to systems, services, and network resources. Data destruction is likely to render stored data irrecoverable by forensic techniques through overwriting files or data on local and r...
View on MITRE ATT&CK →AWS DeleteDBCluster
Permanently deletes an Aurora DB cluster and optionally its automated backups.
AWS DeleteDBInstance
Permanently deletes an RDS database instance, with an option to take a final snapshot before deletion.
AWS DeleteFileSystem
Permanently deletes an EFS file system and all its data; all mount targets must be deleted first.
AWS DeleteGlobalCluster
Deletes an Aurora global database cluster that spans multiple AWS regions.
AWS DeleteObject
Deletes a single object from an S3 bucket; with versioning enabled, a delete marker is created instead.
AWS DeleteObjects
Deletes multiple S3 objects in a single batch request, more efficient than individual delete operations.
AWS DeleteSnapshot
Permanently deletes an EBS snapshot; any AMIs based on it must be deregistered first.
AWS DeleteVolume
Permanently deletes an EBS volume; the volume must be detached from any instance before deletion.
Azure Microsoft.Compute/virtualMachines/delete
Permanently deletes an Azure virtual machine.
Azure Microsoft.EventHub/namespaces/eventhubs/delete
Permanently deletes an Azure Event Hub entity within a namespace.
Azure Microsoft.KeyVault/vaults/delete
Permanently deletes an Azure Key Vault; without soft-delete, all secrets, keys, and certificates are unrecoverable.
Azure Microsoft.KeyVault/vaults/secrets/delete
Deletes a secret from an Azure Key Vault.
Azure Microsoft.OperationalInsights/workspaces/delete
Permanently deletes a Log Analytics workspace and its stored data.
Azure Microsoft.RecoveryServices/vaults/backupProtectedItems/delete
Removes a protected item from Azure Backup, stopping protection and deleting associated backup data.
Azure Microsoft.Sql/servers/databases/delete
Permanently deletes an Azure SQL Database.
Azure Microsoft.Storage/storageAccounts/blobServices/containers/delete
Permanently deletes a blob container from an Azure Storage account.
Azure Microsoft.Storage/storageAccounts/delete
Permanently deletes an Azure Storage account and all of its data.
AWS PutBucketLifecycle
Sets lifecycle configuration on an S3 bucket to automate object transitions or expiration over time.
AWS PutBucketLifecycleConfiguration
Sets lifecycle rules on an S3 bucket to automatically transition objects to cheaper storage tiers or expire them.
AWS ScheduleKeyDeletion
Schedules a KMS customer managed key for deletion after a waiting period (7-30 days), after which encrypted data is unrecoverable.
GCP secretmanager.secrets.delete
Permanently deletes a secret and all of its versions from GCP Secret Manager.
GCP SecretManagerService.DestroySecretVersion
Permanently destroys a specific version of a secret in GCP Secret Manager, making its data irrecoverable.
GCP storage.buckets.delete
Permanently deletes a GCP Cloud Storage bucket; the bucket must be empty before deletion.
GCP storage.objects.delete
Deletes objects from Cloud Storage, used in data destruction or anti-forensics operations.
AWS TerminateInstances
Permanently terminates one or more EC2 instances, releasing instance store data and associated resources.