Wevtutil

MITRE

Tipo Malware:
Tool

Prima attivita:
Unknown

Ultima attivita:
Unknown

Dettagli:

[Wevtutil](https://attack.mitre.org/software/S0645) is a Windows command-line utility that enables administrators to retrieve information about event logs and publishers.(Citation: Wevtutil Microsoft Documentation)

Tecniche Associate (5)

ID	ATT&CK	Tattiche
T1005	Data from Local System	-
T1070.001	Clear Windows Event Logs	-
T1562.002	Disable Windows Event Logging	-
T1685.001	Disable or Modify Windows Event Log	-
T1685.005	Clear Windows Event Logs	-

Usato da Attori (6)

APT28
Nation-state

Aquatic Panda
Unknown

MirrorFace
Unknown

MUSTANG PANDA
Nation-state

Play
Unknown

Volt Typhoon
Unknown

Metadata

ID:	782
Created:	13/01/2026 17:48
Updated:	26/06/2026 16:00