Clear Eventlog

Identifies attempts to clear Windows event log stores. Adversaries attempt to evade detection or destroy forensic evidence on a system to cover their trails and slow down incident response.

• Plataforma: Windows
• Severidad: Medium
• Táctica MITRE: Evasión de defensas
• Técnicas MITRE: T1070, T1070.001

Volver a todas las reglas