SectopRAT UnInstall Command: Self-Deletion via cmd.exe Choice-Delay and Del
Detects the specific command-line sequence used by SectopRAT for self-deletion. The malware uses 'choice' to create a delay followed by a 'del' command to remove its own executable, a technique for deleting files after the process has terminated.
Microsoft Sentinel (KQL)
