# DET0750 — Detection of Indicator Removal on Host ## Descrição Estratégia de detecção DET0750. Plataformas: ICS. ## Data Components Necessários | Data Component | Descrição | |---|---| | [[dc0021-active-directory-object-modification\|DC0021 — Active Directory Object Modification]] | Telemetria necessária | | [[dc0032-process-creation\|DC0032 — Process Creation]] | Telemetria necessária | | [[dc0040-file-deletion\|DC0040 — File Deletion]] | Telemetria necessária | | [[dc0045-windows-registry-key-deletion\|DC0045 — Windows Registry Key Deletion]] | Telemetria necessária | | [[dc0059-file-metadata\|DC0059 — File Metadata]] | Telemetria necessária | | [[dc0061-file-modification\|DC0061 — File Modification]] | Telemetria necessária | | [[dc0063-windows-registry-key-modification\|DC0063 — Windows Registry Key Modification]] | Telemetria necessária | | [[dc0064-command-execution\|DC0064 — Command Execution]] | Telemetria necessária | ## Analytics Relacionadas - [[an1882-analytic-1882|AN1882 (ICS)]] --- *Fonte: [MITRE ATT&CK — DET0750](https://attack.mitre.org/detectionstrategies/DET0750)*