Home/ MITRE Matrix/ Defense Evasion/ T1070.003

T1070.003Clear Command History

T1070.003 — Clear Command History is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 4 detection use cases covering it and 2 threat-intel articles citing it.

Defense Evasion

View on the matrix → Filter Detection Library MITRE official spec ↗

4Use cases

2Articles

0Sub-techniques

1Tactic

↑ Parent technique: T1070 · Indicator Removal

Use cases covering this technique (4)

Windows ConsoleHost History File Deletion ESCU actions · hunting P Windows Powershell History File Deletion ESCU actions · hunting P [LLM] Evooo1Bot anti-forensics — bash history clearing after payload execution Bespoke install · hunting DSΣPDDCS [LLM] PowerShell command-history tampering (Clear-History / PSReadLine SaveNothing / ConsoleHost_history.txt deletion) Bespoke actions · hunting DSΣPDDCS

Articles citing this technique (2)

crit Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies art-25

crit Enterprise Defenses Recovered at the Edge and Collapsed Inside art-70