Now, let's talk about clearing tracks.
OK, so removing evidences is very important part, right, because if you leave your footprints there,
then it is easy for security experts to track you.
OK, so hackers mainly focus on clearing evidences or clearing footprints.
OK, so we will see how we can do it, first of all, it is very important to know that whenever you
do any activity in your operating system, let's say you log in to the system or you log from there
or you do anything.
Your system creates some events, OK, some logs, and they are stored under different locations, OK?
It depends on the type of log.
Right.
So there are security logs, there are application logs, etc. So we will see how we can find them and
clear them.
So first of all, let's open the command prompt, OK?
And we will use a common goal.
Audit all OK, audit Pearlstein's for audit policy.
And if I ain't done it, we will see different options available here to be used with this command.
OK, so let's see.
Audit all aget slash category star status stands for all select all see here on a list of different
logs.
So and these are divided under types and subtypes like you can of scroll and see all of them here.
OK, now we can also use audit all in order to clear all of these logs and for this simply type of slash
and clear, OK, hit enter it says additional press and to cancel or any other key to continue.
OK, so let's do that.
It says the command was successfully executed.
Now let's check it again and see it says no logs remaining, OK?
No auditing, nor did ignore auditing.
OK, so this way you can detect different kinds of logs and you can clear them as well.
Right.
So Audit Vault is the one V OK as it uses common ground.
Now let's see one other thing, which is called event viewer.
Right.
So within the Windows operating system, the event viewer is an application that presents all application,
security setup and system logs within a single dashboard.
All right.
So two X's event, we were simply hit window key.
Bit odd.
OK, so window R and type event.
VW are dot masc and hit enter.
And let's wait for it to open.
Now go to window, looks like see, now you have all types of logs here.
OK, and it has also mentioned a number of events it recorded.
And these are divided into different categories, like the first one is for application logs.
Second one is for security.
Third is set up, then system and then forwarded.
OK, so to clear this simply right, click on this.
OK, here.
Simply right.
Click and select clear log.
OK, so these two are the easiest way to detect logs and clear them.
Right.
So in this lesson we have learned how we can use audit fall and even we were in order to access different
kind of logs and to remove them.