Delete file from Elastic XDR

Elastic Security
1

Hello everyone,

Is it possible or if there's way to delete a file from the console detected by Elastic defend.?

2

execute action can be used for that

3

Hi @lesio

Thanks for the feedback.

and what will be the command associating execute

4

Yes you'll have to use OS specific command, all is documented here

5

Hi @lesio

Thanks for the feedback and the Link provided.

i went through the documents but still its still not clear how to utilize execute action to delete the file.

If possible can you please share example on how to delete the file using execute action command?

Thanks.