Ransomware - Event Log Clearing via wevtutil
Detects usage of wevtutil to clear Security or System event logs as observed in The Gentlemen ransomware operations for defense evasion and covering tracks of their malicious activities.
YARA-L
Detects usage of wevtutil to clear Security or System event logs as observed in The Gentlemen ransomware operations for defense evasion and covering tracks of their malicious activities.
Already have an account?