attack.t1070.002 | Detection.FYI

Clear Linux Logs

Aug 12, 2024 · attack.defense-evasion attack.t1070.002 ·
Share on:

Detects attempts to clear logs on the system. Adversaries may clear system logs to hide evidence of an intrusion

Read More
Commands to Clear or Remove the Syslog

Aug 12, 2024 · attack.defense-evasion attack.t1070.002 ·
Share on:

Detects specific commands commonly used to remove or empty the syslog. Which is often used by attacker as a method to hide their tracks

Read More
Indicator Removal on Host - Clear Mac System Logs

Aug 12, 2024 · attack.defense-evasion attack.t1070.002 ·
Share on:

Detects deletion of local audit logs

Read More