AML.T0101

MITRE ATLAS / ATLAS Techniques

Adversaries invoke an agent tool capable of mutative operations in order to destroy data, using the agent's own write and delete permissions.

Think of it likeTelling the filing clerk to shred a whole cabinet, which they do, because that is a request they are allowed to fulfill.

In plain English

An agent with delete or write access can be directed to destroy data. It executes with its own permissions, so the destruction is authorized as far as every log is concerned.