Detection rules › By event

Microsoft-Windows-CAPI2

Event	Rules
Event ID 70	2
Event ID 81	1

Event ID 70

2 detection rules reference this event. View event page.

Sigma (1)

Certificate Private Key Acquired severity medium T1649

Splunk (1)

Windows Steal Authentication Certificates CryptoAPI severity low T1649

Event ID 81

1 detection rules reference this event. View event page.

Splunk (1)

Windows SIP WinVerifyTrust Failed Trust Validation severity low T1553, T1553.003