Sinisterly
[TuT] Clearing System Logs - Printable Version

+- Sinisterly (https://sinister.ly)
+-- Forum: Computers (https://sinister.ly/Forum-Computers)
+--- Forum: Operating Systems (https://sinister.ly/Forum-Operating-Systems)
+--- Thread: [TuT] Clearing System Logs (/Thread-TuT-Clearing-System-Logs)

Pages: 1 2

[TuT] Clearing System Logs - Syst3m32 - 06-28-2014

This tutorial will walk you through clearing the system logs on a windows computer. The system keeps a long of what programs you opened, hardware used, etc, along with time stamps, and a bunch of other information you might not want someone to see. This tutorial assumes you're using a Windows based PC.
  • Navigate to Control Panel
  • Click Administrative tools. In Windows 7, this is under System and Security in the control panel.
  • Double click and open Event Viewer
  • In the left pane, you will see all the different things that are logged. Expand these, right click, and choose Clear log for each log you wanted wiped.

Note: This is just a Short & Straight Forward Tutorial so don't Hate.

Have fun Smile

RE: [TuT] Clearing System Logs - ralf93 - 06-28-2014

Nice tut, does clearing logs improve you pc performance?

RE: [TuT] Clearing System Logs - Syst3m32 - 06-28-2014

(06-28-2014, 10:16 AM)ralf93 Wrote: Nice tut, does clearing logs improve you pc performance?

It "may" improve it just a bit.

RE: [TuT] Clearing System Logs - BasselGustav - 07-20-2014

thanks Syst3m32 for post i just cleared my windows logs for the first time since i installed windows 7 on my laptop looks like it feels better with no old logs around ^_^

RE: [TuT] Clearing System Logs - Ligeti - 08-06-2014

(06-28-2014, 10:36 AM)Syst3m32 Wrote:
(06-28-2014, 10:16 AM)ralf93 Wrote: Nice tut, does clearing logs improve you pc performance?

It "may" improve it just a bit.

No it doesn't... unless you need storage space! (disk space)

Peace

RE: [TuT] Clearing System Logs - h3r0 - 08-06-2014

Does it leave an entry of "clearing logs"? If I would suggest a method of covertly clearing logs and maybe screen shots (Could make this a decently HQ tutorial)

RE: [TuT] Clearing System Logs - Boomslang - 08-06-2014

(08-06-2014, 07:44 PM)h3r0 Wrote: Does it leave an entry of "clearing logs"? If I would suggest a method of covertly clearing logs and maybe screen shots (Could make this a decently HQ tutorial)

I think the activity of deleting logs is also being logged.
Else, it would be meaningless.

RE: [TuT] Clearing System Logs - L0aD1nG - 08-06-2014

You can also do it via metasploit's metepreter using the command clearev :epic:

On topic : Nice step by step tutorial, well done!

RE: [TuT] Clearing System Logs - Singularity_mybb_import13102 - 08-07-2014

Well for Windows, I recommend ClearLogs
http://ntsecurity.nu/toolbox/clearlogs/

Of course, *nix boxes are configured differently, but this little one-liner should clear them all and bash history:
Code:
for logfile in `find /var/log -type f`; do > $logfile; done && shred -zu ~/.bash_history

but yeah, as @Ligeti mentioned, this isn't going to increase performance. Now, if you are doing this to cover your ass, there is one thing to keep in mind. The best way to leave the log files are how they were before you arrived. It's best not to completely clear them, as that's a big red flag that someone was there. I recommend taking the time (if you have the time) to only remove the logs you left.
(08-06-2014, 11:18 PM)L0aD1nG Wrote: You can also do it via metasploit's metepreter using the command clearev

Yeah, the only downfall is that you have to assume that you gained control to the system via metasploit, or that the system you are on has metasploit installed :/ but as I mentioned before, I'm not a big fan of wiping all the log files anyways, it's just throwing a red flag to the Administrators face that someone was there, and that they didn't want you to know it.

RE: [TuT] Clearing System Logs - L0aD1nG - 08-07-2014

(08-07-2014, 03:08 PM)Singularity Wrote: Yeah, the only downfall is that you have to assume that you gained control to the system via metasploit, or that the system you are on has metasploit installed :/ but as I mentioned before, I'm not a big fan of wiping all the log files anyways, it's just throwing a red flag to the Administrators face that someone was there, and that they didn't want you to know it.

Ohhh come on dude, that was me making some fun there...as you can see I made an "on topic" comment after my idiot joke.

Of course a Windows admin won't go using MSF for just clearing the event logs...I AM NOT A PARANOID MAN! :Laughing: