Please enable JavaScript.

Coggle requires JavaScript to display documents.

Covering Tracks - Coggle Diagram

- - - - auditpol /get /category:*
      - C:>auditpol \<ip address of target> /disable
      - C:>auditpol \<ip address of target>
  - - - Right click or press and hold on the .bat file, and click on Run as administrator
      - If prompted by UAC, click Yes
      - Unblock the .bat file
      - Command prompt :arrow_right: clear the event logs
      - Download the Clear_Event_Viewer_Logs.bat from https://www.tenforums.com
    - - Run from the command prompt
      - C:\clearlogs.exe -app
      - Download clearlogs.exe from http:\www.ntsecurity.nu
      - C:\clearlogs.exe -sec
      - C:\clearlogs.exe -sys
    - - clearev
    - - Linux
        
        Open plain text file with a text editor and delet what you want from /var/log/messages
      - Windows
        
        Start :arrow_right: Controll Panel :arrow_right: System and Security :arrow_right: Administrative Tools :arrow_right:Event Viewer