Clearing Windows Console History (bde47d4b-9987-405c-94c7-b080410e8ea7)

Identifies when a user attempts to clear console history. An adversary may clear the command history of a compromised account to conceal the actions undertaken during an intrusion.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Clear Command History - T1070.003 (3aef9463-9a7a-43ba-8957-a867e07c1e6a)	Attack Pattern	Clearing Windows Console History (bde47d4b-9987-405c-94c7-b080410e8ea7)	Sigma-Rules	1
Clearing Windows Console History (bde47d4b-9987-405c-94c7-b080410e8ea7)	Sigma-Rules	Indicator Removal - T1070 (799ace7f-e227-4411-baa0-8868704f2a69)	Attack Pattern	1
Clear Command History - T1070.003 (3aef9463-9a7a-43ba-8957-a867e07c1e6a)	Attack Pattern	Indicator Removal - T1070 (799ace7f-e227-4411-baa0-8868704f2a69)	Attack Pattern	2