ATT&CK technique
View on MITRE ATT&CK →
T1070.001
Clear Windows Event Logs
Stealth
deprecated
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | Sensitive Audit Policy Sub-Category Disabled | production | 2026-10-19 |
| elastic | Clearing Windows Event Logs | production | 2026-09-18 |
| elastic | Windows Event Logs Cleared | production | 2026-09-18 |
| elastic | Disable Windows Event and Security Logs Using Built-in Tools | production | 2026-09-18 |
| splunk | Cisco IOS XE Log Clearing Sequence With Optional Loopback Removal | production | 2026-05-20 |