# AN1935 — Detection of External Remote Services (ICS) ## Descrição Analítico para detecção de — na plataforma ICS. **Plataformas:** ICS --- ### Fontes de Log | Fonte | Detalhe | |-------|--------| | Network Traffic Flow (DC0078) | Network Traffic | | Logon Session Metadata (DC0088) | Logon Session | | Application Log Content (DC0038) | Application Log | ### Data Components Utilizados - [[dc0038-application-log-content|DC0038]] - [[dc0078-network-traffic-flow|DC0078]] - [[dc0088-logon-session-metadata|DC0088]] --- *Fonte: [MITRE ATT&CK — AN1935](https://attack.mitre.org/detectionstrategies/DET0803#AN1935)*