Skip to main content
← Back to CCC Virtual Private Cloud

CCC.TH07: Logs are Tampered With or Deleted

Threat ID:CCC.TH07
Title:Logs are Tampered With or Deleted
Description:

Attackers may tamper with or delete logs to cover their tracks and evade detection. This prevents security teams from identifying the full scope of an attack and may disrupt forensic investigations.

Related Features:
IDTitleDescription
CCC.F03Access/Activity LogsProvides users with the ability to track all requests made to or activities performed on resources for audit purposes.
CCC.F10LoggingProvides the ability to transmit system events, application activities, and/or user interactions to a logging service
MITRE ATT&CK Techniques:
T1070
T1565
T1027
Related Controls:
IDTitle
CCC.C09Prevent Tampering, Deletion, or Unauthorized Access to Access Logs