# AN1868 — Detection of Scripting (ICS) ## Descrição Analítico para detecção de — na plataforma ICS. **Plataformas:** ICS --- ### Fontes de Log | Fonte | Detalhe | |-------|--------| | Command Execution (DC0064) | Command | | Process Creation (DC0032) | Process | | Process Metadata (DC0034) | Process | | Module Load (DC0016) | Module | | Script Execution (DC0029) | Script | ### Data Components Utilizados - [[dc0016-logon-session-creation|DC0016]] - [[dc0029-network-share-access|DC0029]] - [[dc0032-process-creation|DC0032]] - [[dc0034-process-metadata|DC0034]] - [[dc0064-command-execution|DC0064]] --- *Fonte: [MITRE ATT&CK — AN1868](https://attack.mitre.org/detectionstrategies/DET0735#AN1868)*