Hacker News new | ask | show | jobs
by XVincentX 1250 days ago
They can up to a certain point. MSFT Defender logs has some info with regards what has been deleted, but some other information are missing (such as command line parameters associated with the lnk file)