Indicator Removal — Indicator removal deletes or changes evidence associated with an intrusion. Attackers alter records, artifacts, or other observable traces. The objective involves complicating detection, investigation, or reconstruction of events. – Evidence Concealment

Added October 7, 2026