Filesystem deletion is the removal of a file’s entry from a storage system. On many Unix-like systems, a delete operation can complete instantly when a command such as rm or an API unlink call succeeds, even though data blocks may linger until overwritten. The result is immediate loss of the file from normal access paths.
In cyber security, filesystem deletion matters because it can destroy evidence, break services, or cause irreversible data loss. Attackers may use it to erase logs, wipe backups, or sabotage systems, while defenders treat it as a high-impact action that should be tightly controlled. Good protections include least privilege, sandboxing, approval prompts for destructive commands, and backups or version control for recovery. In AI-driven tools, broad write access makes accidental deletion a real operational risk, so limiting the writable scope is essential.