Rule Info
Name
New Root Certificate Authority Added
Author
Harjot Shah Singh, '@cyb3rjy0t'
Description
Detects newly added root certificate authority to an AzureAD tenant to support certificate based authentication.
Reference
Date
2024-03-26 00:00:00
Modified
None
Id
4bb80281-3756-4ec8-a88e-523c5a6fda9e
Tags
attack.persistence attack.privilege_escalation attack.t1556 DEMO
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Scan your endpoints, forensic images or collected files with our portable scanner THOR