microsoft_windows_eventlog | Detection.FYI

Eventlog Cleared

Apr 28, 2026 · attack.defense-impairment attack.t1685.005 car.2016-04-002 ·
Share on:

One of the Windows Eventlogs has been cleared. e.g. caused by "wevtutil cl" command execution

Read More
Important Windows Eventlog Cleared

Apr 28, 2026 · attack.defense-impairment attack.t1685.005 car.2016-04-002 ·
Share on:

Detects the clearing of one of the Windows Core Eventlogs. e.g. caused by "wevtutil cl" command execution

Read More