Certificate Services receives requests for digital certificates over RPC or HTTP. For organizations that do not rely upon external certification authorities, policies and settings can be customized in order to support the organization’s requirements. The below events can be collected to ensure expected use.

Related Solution

AIS Managed SIEM

SIEM Events

Certificate Services Updated

A Certificate Services template was updated. Event Source - Microsoft-Windows-Security-Auditing - Event Log - Security

Certificate Services Security Updated

Certificate Services template security was updated. Event Source - Microsoft-Windows-Security-Auditing - Event Log - Security

CA Permissions Corrupted or Missing

Security Permission corrupt or missing Event Source - Microsoft-Windows-CertificationAuthority - Event Log - Application