Skip to content
Threat Feed

Tag

Log-Manipulation

1 brief RSS
high advisory

Suspicious Wevtutil Usage for Clearing Windows Event Logs

Detection of wevtutil.exe being used with parameters to clear event logs, indicating potential attempts to evade detection and hinder forensic investigations by adversaries.

Splunk Enterprise +2 defense-evasion windows log-manipulation
2r