| Clear Windows Event Logs - T1685.005 (75b9a4d2-d4e2-4ca1-9aab-1badd9e05fd0) |
Attack Pattern |
Detection of Event Log Clearing on Windows via Behavioral Chain - DET0532 (d340864e-5685-48d5-8a78-3c55a7169207) |
Detection Strategies |
1 |
| Analytic 1472 - AN1472 (6482fa33-322b-47e4-a9f7-c2bcc92d132a) |
Analytics |
Detection of Event Log Clearing on Windows via Behavioral Chain - DET0532 (d340864e-5685-48d5-8a78-3c55a7169207) |
Detection Strategies |
1 |
| Disable or Modify Tools - T1685 (bbde9781-60aa-4b8a-a911-895b0c1b3872) |
Attack Pattern |
Clear Windows Event Logs - T1685.005 (75b9a4d2-d4e2-4ca1-9aab-1badd9e05fd0) |
Attack Pattern |
2 |