Detection test

github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1070.002/T1070.002.md

https://github.com/redcanaryco/atomic-red-team/blob/f339e7da7d05f6057fdfcdd3742bfcf365fee2a9/atomics/T1070.002/T1070.002.md

Published on: github.com

ATT&CK techniques those detections carry

T1685.006Clear Linux or Mac System Logs

Open the original

3 published detections cite this

Citing it, not covering it: each of these was written with this as evidence, and carries the source it came from and the licence it was published under.

Detections citing this reference
Detection	Severity	Source	Published	Licence
Indicator Removal on Host - Clear Mac System Logs	Medium	SigmaHQ	Aug 26, 2026	Detection Rule License 1.1
Syslog Clearing or Removal Via System Utilities	High	SigmaHQ	Aug 26, 2026	Detection Rule License 1.1
Linux Logs Clearing Attempts	Medium	SigmaHQ	Aug 26, 2026	Detection Rule License 1.1

Showing 3 of 3

Filter in the catalogue