Compliance Node Overview
MITRE ATT&CK T1070.008 (Clear Mailbox Data) is an Enterprise Defense Evasion sub-technique of T1070 (Indicator Removal). Adversaries may modify mail and mail application data to remove evidence of their activity. Email applications allow users and other programs to export and delete mailbox data via command line tools or use of APIs. Mail application data can be emails, email metadata, or logs generated by the application or operating system, such as export requests. Affected platforms: Linux, macOS, Windows, Office Suite. MITRE-documented mitigations include M1022 Restrict File and Directory Permissions, M1047 Audit, M1029 Remote Data Storage. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls AC-02, AC-03, AC-04, AC-05, AC-06, AC-16, AC-17, AC-18.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/techniques/T1070/008/
SHA-256 integrity: a0ce9bfa8a060796d8f372696410366299399a13daf6821810d4d4a362ee3c0b
Primary Citations — 7 traced to source
- MITRE ATT&CK Technique T1070.008: Clear Mailbox Data (https://attack.mitre.org/techniques/T1070/008/)
- MITRE ATT&CK Tactic TA0005: Defense Evasion (https://attack.mitre.org/tactics/TA0005/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access