Failed Event Log Clear Via WMI NTEventLogFile ClearEventLog

심각도 보통 Sigma 탐지 룰. Detects failed attempts to clear Windows event logs via the WMI NTEventLogFile ClearEventLog method. Event 5858 in the WMI-Activity operatio…

작성자: Swachchhanda Shrawan Poudel (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본