Example Rule - Windows Event Log Clearing

Ryker Martin@Ryker

•updated May 28, 2026•1•1•12

Detects the clearing of Windows event logs using command line tools like wevtutil or PowerShell. This is a standard example rule.