# DET0804 — Detection of Remote Services ## Descrição Estratégia de detecção DET0804. Plataformas: ICS. ## Data Components Necessários | Data Component | Descrição | |---|---| | [[dc0016-logon-session-creation\|DC0016 — Logon Session Creation]] | Telemetria necessária | | [[dc0032-process-creation\|DC0032 — Process Creation]] | Telemetria necessária | | [[dc0064-command-execution\|DC0064 — Command Execution]] | Telemetria necessária | | [[dc0067-logon-session-creation\|DC0067 — Logon Session Creation]] | Telemetria necessária | | [[dc0078-network-traffic-flow\|DC0078 — Network Traffic Flow]] | Telemetria necessária | | [[dc0082-network-connection-creation\|DC0082 — Network Connection Creation]] | Telemetria necessária | | [[dc0102-network-share-access\|DC0102 — Network Share Access]] | Telemetria necessária | ## Analytics Relacionadas - [[an1936-analytic-1936|AN1936 (ICS)]] --- *Fonte: [MITRE ATT&CK — DET0804](https://attack.mitre.org/detectionstrategies/DET0804)*