New Root Certificate Authority Added (4bb80281-3756-4ec8-a88e-523c5a6fda9e)
Detects newly added root certificate authority to an AzureAD tenant to support certificate based authentication.
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| Modify Authentication Process - T1556 (f4c1826f-a322-41cd-9557-562100848c84) | Attack Pattern | New Root Certificate Authority Added (4bb80281-3756-4ec8-a88e-523c5a6fda9e) | Sigma-Rules | 1 |