# AN1922 — Detection of Module Firmware (ICS) ## Descrição Analítico para detecção de — na plataforma ICS. **Plataformas:** ICS --- ### Fontes de Log | Fonte | Detalhe | |-------|--------| | Device Alarm (DC0108) | Operational Databases | | Application Log Content (DC0038) | Application Log | | Network Traffic Content (DC0085) | Network Traffic | | Firmware Modification (DC0004) | Firmware | ### Data Components Utilizados - [[dc0004-network-traffic-flow|DC0004]] - [[dc0038-application-log-content|DC0038]] - [[dc0085-network-traffic-content|DC0085]] - [[dc0108|DC0108]] --- *Fonte: [MITRE ATT&CK — AN1922](https://attack.mitre.org/detectionstrategies/DET0790#AN1922)*