Certificate Exported From Local Certificate Store
Detects when an application exports a certificate (and potentially the private key as well) from the local Windows certificate store.
Sigma

Detects when an application exports a certificate (and potentially the private key as well) from the local Windows certificate store.

Already have an account?