# AN1923 — Detection of User Execution (ICS) ## Descrição Analítico para detecção de — na plataforma ICS. **Plataformas:** ICS --- ### Data Components Utilizados - [[dc0032-process-creation|DC0032]] - [[dc0038-application-log-content|DC0038]] - [[dc0055-file-access|DC0055]] - [[dc0064-command-execution|DC0064]] - [[dc0082-network-connection-creation|DC0082]] - [[dc0085-network-traffic-content|DC0085]] --- *Fonte: [MITRE ATT&CK — AN1923](https://attack.mitre.org/detectionstrategies/DET0791#AN1923)*