Technique
№ 046 · class: evasion
Indicator Removal
A set of techniques for hindering or preventing digital forensics.
Term
description · examples · notesA set of techniques for hindering or preventing digital forensics.
Description
Includes data encryption, steganography, wiping free space, and artifact removal.
Use of RAM-only malware that leaves no traces on disk.
Detection and analysis require advanced forensic tools and expertise.
Often used in combination with log-tampering and timestomping techniques.
Examples
- SDelete for secure wiping of free disk space
- Steganography for hiding C2 commands in images
Notes
- Umbrella term covering log-tampering, timestomping, and other trace removal techniques.
Mentioned in the news
Threats
used by 4Threats that use it. Select one to open its page.
Defenses
countered by 4How it is countered. Select one to open its page.