Evidence hidden by deleting system log file

Classification:

attack

Tactic:

Technique:

このページは日本語には対応しておりません。随時翻訳に取り組んでいます。翻訳に関してご質問やご意見ございましたら、お気軽にご連絡ください。

Goal

Detect the removal of system log files such as in order to hide evidence of malicious activity.

Monitor the file system for the deletion of specific system logs such as /var/log/syslog.

Requires Agent version 7.27 or later.