🛡️ Security

Anti-Forensics

Techniques attackers use to hide or destroy evidence of intrusion, such as deleting or truncating log files, clearing event logs, or altering timestamps. Missing logs are themselves an indicator of compromise.

📚 Deep Dive

Learn Article

Hunting for Compromise Before the Vendor Publishes Indicators

A vendor says a flaw is exploited but has no IoC list yet. You can still hunt. Here is a method built on process lineage, log integrity, and behavioral baselines that works with zero curated indicators.

intermediate 5 min read

Back to Glossary