Active Directory Certificate Services Denied Certificate Enrollment Request (994bfd6d-0a2e-481e-a861-934069fcf5f5)

Detects denied requests by Active Directory Certificate Services. Example of these requests denial include issues with permissions on the certificate template or invalid signatures.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
Active Directory Certificate Services Denied Certificate Enrollment Request (994bfd6d-0a2e-481e-a861-934069fcf5f5)	Sigma-Rules	Install Root Certificate - T1553.004 (c615231b-f253-4f58-9d47-d5b4cbdb6839)	Attack Pattern	1
Subvert Trust Controls - T1553 (b83e166d-13d7-4b52-8677-dff90c548fd7)	Attack Pattern	Install Root Certificate - T1553.004 (c615231b-f253-4f58-9d47-d5b4cbdb6839)	Attack Pattern	2