MITRE ATT&CKsoftware (tool)

S0645 Wevtutil

Published 2021-09-14 Modified 2026-05-12 Official page ↗
Domain
enterprise
Platforms
Windows
Version
1.3
Created
2021-09-14

Description

Wevtutil is a Windows command-line utility that enables administrators to retrieve information about event logs and publishers.

Related

Uses · MITRE ATT&CK (3)

  • T1685.001 Disable or Modify Windows Event Log sub-technique
  • T1685.005 Clear Windows Event Logs sub-technique
  • T1005 Data from Local System technique

Referenced by MITRE ATT&CK · uses (8)

References