Cisco Clear Logging or Archive History
This rule detects attempts to clear logging or archive history on Cisco network devices. Adversaries may clear command history or logging to remove forensic evidence of their activities, which is a common defense evasion technique.
Sigma
