Windows clearing tracks

Clearing Windows Event Logs

❗ Elevated privileges are necessary to clean the Event logs.

• From the Meterpreter session clear the event log

clearev

#Metasploit

• Use the Cleanup RC File

# Cleanup Meterpreter RC File:
cat /root/.msf4/logs/persistence/ATTACKDEFENSE_20230429.0454/ATTACKDEFENSE_20230429.0454.rc

background
sessions 1
resource /root/.msf4/logs/persistence/ATTACKDEFENSE_20230429.1019/ATTACKDEFENSE_20230429.1