Patchfirst
T1685.006Defense Impairment

Clear Linux or Mac System Logs

Adversaries may clear system logs to hide evidence of an intrusion. macOS and Linux both keep track of system or user-initiated actions via system logs. The majority of native system logging is stored under the `/var/log/` directory. Subfolders in this directory categorize logs by their related functions, such as: * `/var/log/messages:`: General and system-related messages * `/var/log/secure or…

attack.mitre.org ↗
CVEs0
In 0
Reports0

Detections

4 Sigma rules tagged T1685.006

Sigma rules © SigmaHQ, Detection Rule License 1.1; linked, not reproduced.

CVEs linked to Clear Linux or Mac System Logs

0 CVEs, by priority. Each link shows its badge.

No CVEs are linked to this technique yet.

↑ ↓ chooseEnter openEsc close