#T1070

• 2026-08-02 23:54 UTC Cortex XSIAM : Thwart anti-forensic cover-ups by detecting the intentional wiping of the NTFS USN change journal, a deliberate tactic used by adversaries to erase digital footprints and hinder incident response ...

  #alerts#detection#multi-tenant#xql#T1070