Synopsis
SIEM Pull Service has detected via Splunk query that, on this Linux system, a user account was deleted.
Description
SIEM Pull Service has detected via Splunk query that, on this Linux system, a user account was deleted. The query used was (sourcetype=linux_audit OR sourcetype=linux_secure) AND (op=delete-user OR "delet* user")
