Detections

Explore public detection logic contributed by the community across SIEM and rule languages.

22 detections

Detects calls to PowerShell cmdlets used to export certificates from the local certificate store. Threat actors have been observed abusing this technique to steal private keys from compromised machines, which can then be used for authentication or decryption.
avatar
SigmaHQ Detections@sigmaHQ
avatar
SigmaHQ
2 years ago
0015
Page 2 of 2