Well, certain commands would be noticed, such as a "delete everything on the hard drive" command. If it's a new procedure, it would be difficult to detect however.