Detection rules › By catalog entry

Microsoft-Windows-CertificateServicesClient-Lifecycle-System

Catalog entry	Rules
Event ID 1007	2

Event ID 1007

2 detection rules reference this catalog entry. View catalog entry.

Sigma (1)

Certificate Exported From Local Certificate Store severity medium T1649

Splunk (1)

Windows Export Certificate severity low T1552,T1552.004,T1649

Back to all Microsoft-Windows-CertificateServicesClient-Lifecycle-System catalog entries