CmdID / Techniques / T1070
T1070.003 Indicator Removal: Clear Command History
In addition to clearing system logs, an adversary may clear the command history of a compromised account to conceal the actions undertaken during an intrusion. MITRE ATT&CK
1 program on CmdID 1 Sigma rule T1070.003 on attack.mitre.org
Part of
T1070Indicator Removal