http://i4pd4z4xpaslzucyukt22csbpfwusits347iofqchkls6pm3mu6veaid.onion/threat-library/techniques/forensics/trace-evidence.html
If a tool is too expensive to discard after each action, modify it so that an adversary cannot link it to traces it may have left at the action site. For example, you can dispose of the disc of a disc cutter. Stash spot or safe house An adversary can use trace evidence to link objects to an action site.