Suspicious X509Enrollment - Ps Script (504d63cb-0dba-4d02-8531-e72981aace2c)

Detect use of X509Enrollment

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Install Root Certificate - T1553.004 (c615231b-f253-4f58-9d47-d5b4cbdb6839)	Attack Pattern	Suspicious X509Enrollment - Ps Script (504d63cb-0dba-4d02-8531-e72981aace2c)	Sigma-Rules	1
Subvert Trust Controls - T1553 (b83e166d-13d7-4b52-8677-dff90c548fd7)	Attack Pattern	Install Root Certificate - T1553.004 (c615231b-f253-4f58-9d47-d5b4cbdb6839)	Attack Pattern	2