T1070.003
Indicator Removal on Host: Clear Command History
Indicator Removal on Host: Clear Command History
Indicator Removal on Host: Clear FreeBSD, Linux or Mac System Logs
Indicator Removal on Host: Clear Windows Event Logs
Permission Groups Discovery: Domain Groups
Permission Groups Discovery: Local Groups