Skip to content
Threat Feed

Tag

Event-Logs

1 brief RSS
high advisory

Windows Eventlog Cleared Via Wevtutil

Adversaries may clear Windows event logs using `wevtutil.exe` to remove evidence of their activity and hinder forensic investigations.

Splunk Enterprise +2 defense-evasion windows event-logs
2r 1t