Syslog Clearing or Removal Via System Utilities

SigmaHQ Detections@sigmaHQ

•updated Apr 28, 2026•0•0•0

Detects specific commands commonly used to remove or empty the syslog. Which is a technique often used by attacker as a method to hide their tracks