Added Sigma mapping for certificateservicesclient-lifecycle-system

For e.g. https://github.com/SigmaHQ/sigma/tree/master/rules/windows/builtin/certificate_services_client_lifecycle_system
google · Nov 6, 2024 · 7bf591d · 7bf591d
1 parent f457b72
commit 7bf591d
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/data/sigma_config.yaml b/data/sigma_config.yaml
@@ -78,6 +78,11 @@ logsources:
     product: windows
     conditions:
       data_type: "windows:evtx:record"
+  service_windows_certificate_services:
+    service: certificateservicesclient-lifecycle-system
+    conditions:
+      source_name:
+        - "Microsoft-Windows-CertificateServicesClient-Lifecycle-System"
   service_windows_security:
     service: security
     conditions: