Skip to content

Hide Navigation Hide TOC

Active Directory Certificate Services Denied Certificate Enrollment Request (994bfd6d-0a2e-481e-a861-934069fcf5f5)

Detects denied requests by Active Directory Certificate Services. Example of these requests denial include issues with permissions on the certificate template or invalid signatures.

Cluster A Galaxy A Cluster B Galaxy B Level
Install Root Certificate - T1553.004 (c615231b-f253-4f58-9d47-d5b4cbdb6839) Attack Pattern Active Directory Certificate Services Denied Certificate Enrollment Request (994bfd6d-0a2e-481e-a861-934069fcf5f5) Sigma-Rules 1
Install Root Certificate - T1553.004 (c615231b-f253-4f58-9d47-d5b4cbdb6839) Attack Pattern Subvert Trust Controls - T1553 (b83e166d-13d7-4b52-8677-dff90c548fd7) Attack Pattern 2