Technique
technique:log_deletion
Also: log destruction
Destruction or shortening of log retention to remove evidence of system activity.
Destruction or shortening of log retention to remove evidence of system activity.
“He changes the life cycle retention policies to just one day. This will delete the logs”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | USES | Nickolas Sharp | Explicit | 178 |
| incoming | INVOLVES | Ubiquiti breach | Explicit | 178 |
Nickolas Sharp USES log deletion
Nick changed AWS log-retention policies to one day in an attempt to delete evidence of his activity.
Explicit Confidence 99% · Jack Rhysider EP 178 Details
“He changes the life cycle retention policies to just one day.”
“This will delete the logs”
Ubiquiti breach INVOLVES log deletion
The breach involved Nick’s deletion or attempted deletion of AWS logs to conceal activity.
Explicit Confidence 98% · Jack Rhysider EP 178 Details
“This will delete the logs”