Files
sigma-rules/rta/secure_file_deletion.py
T
Ross Wolf a0d3b4bd23 Populate RTA directory.
Co-Authored-By: Brent Murphy <56412096+bm11100@users.noreply.github.com>
Co-Authored-By: Daniel Stepanic <57736958+dstepanic17@users.noreply.github.com>
Co-Authored-By: David French <56409778+threat-punter@users.noreply.github.com>
Co-Authored-By: Joe Desimone <56411054+joe-desimone@users.noreply.github.com>
Co-Authored-By: Justin Ibarra <brokensound77@users.noreply.github.com>
2020-06-29 23:07:18 -06:00

30 lines
816 B
Python

# Copyright Elasticsearch B.V. and/or licensed to Elasticsearch B.V. under one
# or more contributor license agreements. Licensed under the Elastic License;
# you may not use this file except in compliance with the Elastic License.
import os
import subprocess
import tempfile
from . import common
@common.requires_os(common.WINDOWS)
def main():
temp_path = os.path.join(tempfile.gettempdir(), os.urandom(16).encode('hex'))
sdelete_path = common.get_path("bin", 'sdelete.exe')
try:
# Create a temporary file and close handles so it can be deleted
with open(temp_path, 'wb') as f_out:
f_out.write('A')
subprocess.check_call([sdelete_path, '/accepteula', temp_path])
finally:
common.remove_file(temp_path)
if __name__ == "__main__":
exit(main())