Kyber Ransomware Event Log Clearing (wevtutil loop)

Thiru N@Iamthiru

•updated Apr 22, 2026•2•0•264

Detects the systemic deletion of Windows event logs using a tight loop with wevtutil.exe, a defense evasion tactic used by Kyber ransomware to impair investigations.