ATT&CK technique
View on MITRE ATT&CK →
T1070.002
Clear Linux or Mac System Logs
Stealth
deprecated
5 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| elastic | System Log File Deletion | production | 2026-10-06 |
| elastic | ESXi Host Logs Deleted with rm | production | 2026-09-30 |
| elastic | Attempt to Clear Kernel Ring Buffer | production | 2026-09-18 |
| elastic | Attempt to Clear Logs via Journalctl | production | 2026-09-18 |
| elastic | File Creation in /var/log via Suspicious Process | production | 2026-09-18 |