Olympic Destroyer uses the native Windows utilities "vssadmin", "wbadmin", and "bcdedit" to delete and disable operating system recovery features such as the Windows backup catalog and Windows Automatic Repair.