Suspicious X509Enrollment - Process Creation (114de787-4eb2-48cc-abdb-c0b449f93ea4)

Detect use of X509Enrollment

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Install Root Certificate - T1553.004 (c615231b-f253-4f58-9d47-d5b4cbdb6839)	Attack Pattern	Suspicious X509Enrollment - Process Creation (114de787-4eb2-48cc-abdb-c0b449f93ea4)	Sigma-Rules	1
Subvert Trust Controls - T1553 (b83e166d-13d7-4b52-8677-dff90c548fd7)	Attack Pattern	Install Root Certificate - T1553.004 (c615231b-f253-4f58-9d47-d5b4cbdb6839)	Attack Pattern	2