Skip to content

Hide Navigation Hide TOC

Clear PowerShell History - PowerShell Module (f99276ad-d122-4989-a09a-d00904a5f9d2)

Detects keywords that could indicate clearing PowerShell history

Cluster A Galaxy A Cluster B Galaxy B Level
Clear Command History - T1070.003 (3aef9463-9a7a-43ba-8957-a867e07c1e6a) Attack Pattern Clear PowerShell History - PowerShell Module (f99276ad-d122-4989-a09a-d00904a5f9d2) Sigma-Rules 1
Clear Command History - T1070.003 (3aef9463-9a7a-43ba-8957-a867e07c1e6a) Attack Pattern Indicator Removal - T1070 (799ace7f-e227-4411-baa0-8868704f2a69) Attack Pattern 2