Home / malware

PDF

Hacktool.EventLog

First posted on 09 July 2015.
Source: Symantec

Aliases :

There are no other names known for Hacktool.EventLog.

Explanation :

The program may perform the following actions:
Kill all processes with a specified nameGather and save log on and log off events from the security channelSecurely delete itselfDelete filesShow all logs from an .evtx fileGather and save log on and log off eventsQuery and filter event logsFilter logs by providerList all channels List used channelsMatch keywords in XML data from all channelsMatch keywords in XML data from a specific channelsFlush all logs to diskGather and save all logs from a channel

Last update 09 July 2015

 

TOP