# AN1855 — Detection of Hooking (ICS) ## Descrição Analítico para detecção de — na plataforma ICS. **Plataformas:** ICS --- ### Fontes de Log | Fonte | Detalhe | |-------|--------| | OS API Execution (DC0021) | Process | | Process Metadata (DC0034) | Process | ### Data Components Utilizados - [[dc0021-active-directory-object-modification|DC0021]] - [[dc0034-process-metadata|DC0034]] --- *Fonte: [MITRE ATT&CK — AN1855](https://attack.mitre.org/detectionstrategies/DET0722#AN1855)*