Detection rules › By catalog entry

Microsoft-Windows-CAPI2

Catalog entry	Rules
Event ID 70	2
Event ID 81	1

Event ID 70

2 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Certificate Private Key Acquired severity medium T1649

Splunk (1)

Windows Steal Authentication Certificates CryptoAPI severity low T1649

Event ID 81

1 detection rules reference this catalog entry. View catalog entry.

Splunk (1)

Windows SIP WinVerifyTrust Failed Trust Validation severity low T1553,T1553.003

Back to all Microsoft-Windows-CAPI2 catalog entries