Create fsutil.yml

[ElliotKillick]

New lolbin for zeroing out a file: fsutil.exe

9999999999 bytes is the upper limit it will zero out to, if a file is shorter than that it will not increase it to that size.

[api0cradle]

Note2self: This requires a new category to the portal

[bohops]

We are going to add a new function called 'tamper' for this use case.

Additionally, fsutil can be used to delete the usn journal volume to hide file creation activity (e.g. cover tracks)

fsutil.exe usn deletejournal /d c:

ref: https://www.elastic.co/guide/en/siem/guide/current/delete-volume-usn-journal-with-fsutil.html

[xenoscr]

@elliotkillick, Thank you for your contribution to the LOLBas!