Indicator Removal on Host

Adversaries may delete or modify artifacts generated on a host system to remove evidence of their presence or hinder defenses. Various artifacts may be created by an adversary or something that can be attributed to an adversary's actions. [1]

ID: T1070
Sub-techniques:  T1070.001
Tactic: Defense Evasion
Platforms: Ground Segment, Space Segment
Version: 2.0
Created: 25 August 2022
Last Modified: 05 February 2025

Mitigations

ID Mitigation Description
M2066 Log integrity protection

References