Abyssos self-delete via cmd.exe ping-delay then del /F /Q of recently-run parent
Detects Abyssos's SELF_DELETE technique: a cmd.exe process using the exact 'ping 127.0.0.1 -n 3 >nul & del /F /Q <path>' pattern to delete a file that was the parent of the current process within the prior 15 minutes, excluding common shell/terminal parents.
Microsoft Sentinel (KQL)
