Threat Actors may clear Windows Event Logs to hide the activity of an intrusion. Windows Event Logs are a record of a computer's alerts and notifications. There are three system-defined sources of events: System, Application, and Security, with five event types: Error, Warning, Information, Success Audit, and Failure Audit.
This type of attack technique cannot be easily mitigated with preventive controls since it is based on the abuse of system features.