Payouts King Windows Event Log Clearing via wevtutil or Clear-EventLog

Ibrahim Saud@tektrix

•updated Jun 24, 2026•0•0•3

Detects attempts to clear Windows Event Logs using either the wevtutil command-line utility, PowerShell Clear-EventLog cmdlets, or by monitoring specific Windows Security Event IDs 1102 and 104 which indicate logs have been cleared.