diff --git a/atomics/T1070.003/T1070.003.yaml b/atomics/T1070.003/T1070.003.yaml index f78e7440..f688692e 100644 --- a/atomics/T1070.003/T1070.003.yaml +++ b/atomics/T1070.003/T1070.003.yaml @@ -144,6 +144,22 @@ atomic_tests: cleanup_command: | [ "$(uname)" = 'FreeBSD' ] && rmuser -y testuser1 || userdel -f testuser1 name: sh + +- name: Clear Docker Container Logs + auto_generated_guid: cfa159ba-9846-4858-b287-6b97411cbdaf + description: | + Clears Docker container logs using the Docker CLI and the truncate command, removing all log entries. + supported_platforms: + - linux + dependencies: + - description: | + Install Docker CLI + prereq_command: | + (which docker >/dev/null) || (curl -fsSL https://get.docker.com/ | sh) + executor: + command: | + docker container prune -f && sudo truncate -s 0 /var/lib/docker/containers/*/*-json.log + - name: Prevent Powershell History Logging auto_generated_guid: 2f898b81-3e97-4abb-bc3f-a95138988370 description: |