Source: MITRE_ATTCK
Threat actor: APT28
Affected sector: Unknown
Attack vector: Unknown Tactic
Severity: High
Confidence: High
MITRE ATT&CK techniques: T1685.005
Description:
MITRE ATT&CK technique T1685.005 (Clear Windows Event Logs) used by APT28. Adversaries may clear Windows Event Logs to hide the activity of an intrusion. Windows Event Logs are a record of a computer's alerts and notifications. There are three system-defined sources of event...