value:  Actors or malware may prevent IOCs from their operations from being detected with redirections, disabling security tools, or changing the telemetry flow inside a target environment. 
name: Impair Defenses: Indicator Blocking