userdel

Remove a user account or remove a user from a group. tldr-pages

On Linux 1 Sigma rule name it

Linux

Remove a user

sudo userdel usernameIdentify

Trips 1 Sigma rule: mediumUser Has Been Deleted Via Userdel by Tuan Le (NCSGroup)

Remove a user in other root directory

sudo userdel --root path/to/other_root usernameIdentify

Trips 1 Sigma rule: mediumUser Has Been Deleted Via Userdel by Tuan Le (NCSGroup)

Remove a user along with the home directory and mail spool

sudo userdel --remove usernameIdentify

Trips 1 Sigma rule: mediumUser Has Been Deleted Via Userdel by Tuan Le (NCSGroup)

Sigma process creation rules that name userdel