Compliance Node Overview
MITRE ATT&CK T1562.008 (Disable or Modify Cloud Logs) is an Enterprise Defense Evasion sub-technique of T1562 (Impair Defenses). An adversary may disable or modify cloud logging capabilities and integrations to limit what data is collected on their activities and avoid detection. Cloud environments allow for collection and analysis of audit and application logs that provide insight into what activities a user does within the environment. If an adversary has sufficient permissions, they can disable or modify logging to avoid detection of their activities. Affected platforms: IaaS, SaaS, Office Suite, Identity Provider. MITRE-documented mitigations include M1018 User Account Management. The Center for Threat-Informed Defense maps this technique to NIST SP 800-53 Rev 5 controls AC-02, AC-03, AC-05, AC-06, CA-07, CM-02, CM-03, CM-05.
Pillar: Cybersecurity · Authority: MITRE Corporation · Version: 1.0.0 · Last updated:
Primary source: https://attack.mitre.org/versions/v16/techniques/T1562/008/
SHA-256 integrity: 93a82626d9d8df61e7a25902c7b7cd4f454d1ee16dd27e8f43204badf29b0098
Primary Citations — 7 traced to source
- MITRE ATT&CK Technique T1562.008: Disable or Modify Cloud Logs (https://attack.mitre.org/versions/v16/techniques/T1562/008/)
- MITRE ATT&CK Tactic TA0005: Defense Evasion (https://attack.mitre.org/tactics/TA0005/)
+ 5 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access