Detection rules › By eventMicrosoft-Windows-Eventlog event 11023 detection rules reference this event. View event page.Sigma (1)Security Eventlog Cleared severity high T1070.001 Elastic (1)Windows Event Logs Cleared T1070, T1070.001 Splunk (1)Windows Event Log Cleared T1070.001