# DET0749 — Detection of Data from Local System ## Descrição Estratégia de detecção DET0749. Plataformas: ICS. ## Data Components Necessários | Data Component | Descrição | |---|---| | [[dc0021-active-directory-object-modification\|DC0021 — Active Directory Object Modification]] | Telemetria necessária | | [[dc0029-network-share-access\|DC0029 — Network Share Access]] | Telemetria necessária | | [[dc0032-process-creation\|DC0032 — Process Creation]] | Telemetria necessária | | [[dc0055-file-access\|DC0055 — File Access]] | Telemetria necessária | | [[dc0064-command-execution\|DC0064 — Command Execution]] | Telemetria necessária | ## Analytics Relacionadas - [[an1881-analytic-1881|AN1881 (ICS)]] --- *Fonte: [MITRE ATT&CK — DET0749](https://attack.mitre.org/detectionstrategies/DET0749)*