-
Notifications
You must be signed in to change notification settings - Fork 85
Certificates
Tony Phipps edited this page Mar 22, 2018
·
6 revisions
Tactic: Execution, Persistence
- Select Thumbprint, Issuer, Subject where Path equals "LocalMachine\Root"
Monitor new certificates installed on a system that could be due to malicious activity. Check pre-installed certificates on new systems to ensure unnecessary or suspicious certificates are not present.