Not really. If you have good opsec you don't need to. A well defended system will detect attempts to tamper logs or disable defenses. It is so difficult to do t

Not really. If you have good opsec you don't need to. A well defended system will detect attempts to tamper logs or disable defenses. It is so difficult to do this without being detected to the point where attackers are exploiting driver vulns firsr and then disabling security tools from the kernel.