# DET0725 — Detection of Masquerading ## Descrição Estratégia de detecção DET0725. Plataformas: ICS. ## Data Components Necessários | Data Component | Descrição | |---|---| | [[dc0001-process-creation\|DC0001 — Process Creation]] | Telemetria necessária | | [[dc0012-script-execution\|DC0012 — Script Execution]] | Telemetria necessária | | [[dc0034-process-metadata\|DC0034 — Process Metadata]] | Telemetria necessária | | [[dc0059-file-metadata\|DC0059 — File Metadata]] | Telemetria necessária | | [[dc0060-service-creation\|DC0060 — Service Creation]] | Telemetria necessária | | [[dc0061-file-modification\|DC0061 — File Modification]] | Telemetria necessária | | [[dc0064-command-execution\|DC0064 — Command Execution]] | Telemetria necessária | | [[dc0065-service-modification\|DC0065 — Service Modification]] | Telemetria necessária | ## Analytics Relacionadas - [[an1858-analytic-1858|AN1858 (ICS)]] --- *Fonte: [MITRE ATT&CK — DET0725](https://attack.mitre.org/detectionstrategies/DET0725)*