| Disable or Modify Windows Event Log - T1685.001 (1411e6b8-80a6-4465-9909-54eaa9c67ce0) |
Attack Pattern |
Detect Disabled Windows Event Log - DET0187 (cfedfc6c-6e31-481b-be1e-e23a760fec44) |
Detection Strategies |
1 |
| Analytic 0535 - AN0535 (705168ad-1701-453c-9aea-c75029492b89) |
Analytics |
Detect Disabled Windows Event Log - DET0187 (cfedfc6c-6e31-481b-be1e-e23a760fec44) |
Detection Strategies |
1 |
| Disable or Modify Tools - T1685 (bbde9781-60aa-4b8a-a911-895b0c1b3872) |
Attack Pattern |
Disable or Modify Windows Event Log - T1685.001 (1411e6b8-80a6-4465-9909-54eaa9c67ce0) |
Attack Pattern |
2 |