ATT&CK technique
View on MITRE ATT&CK →
T1685.006
Clear Linux or Mac System Logs
Defense Impairment
4 detections found
Detection rules
| Source | Rule | Status | Updated |
|---|---|---|---|
| sigma | Linux Logs Clearing Attempts | stable | 2026-03-18 |
| sigma | Clear or Disable Kernel Ring Buffer Logs via Syslog Syscall | experimental | 2025-12-05 |
| sigma | Syslog Clearing or Removal Via System Utilities | test | 2025-10-15 |
| sigma | Indicator Removal on Host - Clear Mac System Logs | test | 2022-09-16 |