Windows Event Log Cleared - Security or System Log (T1070.001)

Ankit Mehta@Secvyn

•updated Jun 29, 2026•0•0•1

Detects the clearing of Windows Security and System event logs, or Defender XDR audit logs, indicating potential adversary activity to remove traces of their actions.