# AN1866 — Detection of Replication Through Removable Media (ICS) ## Descrição Analítico para detecção de — na plataforma ICS. **Plataformas:** ICS --- ### Fontes de Log | Fonte | Detalhe | |-------|--------| | Process Creation (DC0032) | Process | | File Creation (DC0039) | File | | Drive Creation (DC0042) | Drive | | File Access (DC0055) | File | ### Data Components Utilizados - [[dc0032-process-creation|DC0032]] - [[dc0039-file-creation|DC0039]] - [[dc0042-drive-creation|DC0042]] - [[dc0055-file-access|DC0055]] --- *Fonte: [MITRE ATT&CK — AN1866](https://attack.mitre.org/detectionstrategies/DET0733#AN1866)*