# DET0801 — Detection of Device Restart/Shutdown ## Descrição Estratégia de detecção DET0801. Plataformas: ICS. ## Data Components Necessários | Data Component | Descrição | |---|---| | [[dc0038-application-log-content\|DC0038 — Application Log Content]] | Telemetria necessária | | [[dc0078-network-traffic-flow\|DC0078 — Network Traffic Flow]] | Telemetria necessária | | [[dc0085-network-traffic-content\|DC0085 — Network Traffic Content]] | Telemetria necessária | | [[dc0108\|DC0108 — DC0108]] | Telemetria necessária | ## Analytics Relacionadas - [[an1933-analytic-1933|AN1933 (ICS)]] --- *Fonte: [MITRE ATT&CK — DET0801](https://attack.mitre.org/detectionstrategies/DET0801)*