WinSecWiki > Security Settings > Local Policies > Audit Policy > Non Audit > Log Clear

Log Clear (Eventlog source)

These events are logged even if you disable all auditing. 

Coverage on events generated by this category are currently in the Security Log Encyclopedia:

Event ID	Title
1102	The audit log was cleared

Back to top

 

Upcoming Webinars Anatomy of a Cloud Hack: The Cloudflare/Okta Compromise – A Story of Tokens, Lateral Movement, Persistence and the Salvation of Zero Trust and Hard MFA Tokens

Additional Resources