Certificate Exported From Local Certificate Store (58c0bff0-40a0-46e8-b5e8-b734b84d2017)

Detects when an application exports a certificate (and potentially the private key as well) from the local Windows certificate store.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Certificate Exported From Local Certificate Store (58c0bff0-40a0-46e8-b5e8-b734b84d2017)	Sigma-Rules	Steal or Forge Authentication Certificates - T1649 (7de1f7ac-5d0c-4c9c-8873-627202205331)	Attack Pattern	1