# DET0800 — Detection of Network Sniffing ## Descrição Estratégia de detecção DET0800. Plataformas: ICS. ## Data Components Necessários | Data Component | Descrição | |---|---| | [[dc0032-process-creation\|DC0032 — Process Creation]] | Telemetria necessária | | [[dc0064-command-execution\|DC0064 — Command Execution]] | Telemetria necessária | ## Analytics Relacionadas - [[an1932-analytic-1932|AN1932 (ICS)]] --- *Fonte: [MITRE ATT&CK — DET0800](https://attack.mitre.org/detectionstrategies/DET0800)*