Windows Certificate Services
Certificate Services receives requests for digital certificates over RPC or HTTP. For organizations that do not rely upon external certification authorities, policies and settings can be customized in order to support the organization’s requirements. The below events can be collected to ensure expected use.
A Certificate Services template was updated. Event Source - Microsoft-Windows-Security-Auditing - Event Log - Security
Certificate Services template security was updated. Event Source - Microsoft-Windows-Security-Auditing - Event Log - Security
Security Permission corrupt or missing Event Source - Microsoft-Windows-CertificationAuthority - Event Log - Application