| Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name |
|---|---|---|---|---|
| attribute.integrity.variety.Log tampering | Log tampering or modification | related-to | T1070.001 | Indicator Removal on Host: Clear Windows Event Logs |
| attribute.integrity.variety.Log tampering | Log tampering or modification | related-to | T1070.002 | Indicator Removal on Host: Clear Linux or Mac System Logs |