Hide Navigation Hide TOC Indicator Removal on Host - Clear Mac System Logs (acf61bd8-d814-4272-81f0-a7a269aa69aa) Detects deletion of local audit logs Cluster A Galaxy A Cluster B Galaxy B Level Indicator Removal on Host - Clear Mac System Logs (acf61bd8-d814-4272-81f0-a7a269aa69aa) Sigma-Rules Clear Linux or Mac System Logs - T1685.006 (5e29d64d-2b14-4f92-875e-4c9c498e213c) Attack Pattern 1 Disable or Modify Tools - T1685 (bbde9781-60aa-4b8a-a911-895b0c1b3872) Attack Pattern Clear Linux or Mac System Logs - T1685.006 (5e29d64d-2b14-4f92-875e-4c9c498e213c) Attack Pattern 2