Certificates - Windows
Log In or Register to download the BES file, and more.

0 Votes

Versioning - This is the latest version.

1Certificates - Windows8/15/2016 6:41:22 PM
2Certificates - Windows9/13/2016 4:48:16 PM

Description

This analysis provides information on the current state of the Windows Certificate Store.

This analysis relies on Fixlet: Invoke - Certificate Store Probe - Windows in the C3-Inventory site

Information on using this content is available here: https://github.com/strawgate/C3-Inventory/wiki/Certificate-Store

For general information or to report issues with C3 Inventory content please visit GitHub here: https://github.com/strawgate/C3-Inventory


Property Details

ID2998390
TitleCertificates - Windows
DomainBESC
Added by on 9/13/2016 4:48:16 PM
Last Modified by on 9/13/2016 4:48:16 PM
Counters 2485 Views / 93 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Properties

Certificates - Trusted Third-Party Root Authorities - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
values "subject" of keys of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store\LocalMachine\AuthRoot" of native registry
Certificates - Trusted Intermediate Authorities - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
values "subject" of keys of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store\LocalMachine\CA" of native registry
Certificates - Trusted Root Authorities - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
values "subject" of keys of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store\LocalMachine\Root" of native registry
Certificates - Trusted Publishers - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
values "subject" of keys of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store\LocalMachine\TrustedPublisher" of native registry
Certificates - Trusted Roots with Private Key - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
values "subject" of keys whose (value "Private Key" of it as string as boolean = true) of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store\LocalMachine\Root" of native registry
Certificates - Remote Desktop - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
values "subject" of keys of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store\LocalMachine\Remote Desktop" of native registry
Certificates - Trusted Code Signers - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
values "subject" of keys whose (value "Usage" of it as string contains "Code Signing") of keys of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store\LocalMachine" of native registry
Certificates - My Certificates - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
(values "subject" of it, value "Not Before" of it, value "Not After" of it) of keys of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store\LocalMachine\My" of native registry
Certificates - Last Probe - Windows
Period 6 hours
 
  * Results in a true/false
Show indented relevance
(value "Last Updated Date" of it as string as date & (value "Last Updated Time" of it as string as time_of_day & local time zone)) of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store" of native registry
Certificates - My Certificates Expiring in 30 Days - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
(values "subject" of it, value "Not After" of it) of keys whose ((it > 0 * day and it < 30 * day) of (value "Not After Date" of it as string as date & (value "Not After Time" of it as string as time_of_day & local time zone) - now)) of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store\LocalMachine\My" of native registry
Certificates - My Certificates Expiring in 7 Days - Windows
Period 12 hours
 
  * Results in a true/false
Show indented relevance
(values "subject" of it, value "Not After" of it) of keys whose ((it > 0 * day and it < 7 * day) of (value "Not After Date" of it as string as date & (value "Not After Time" of it as string as time_of_day & local time zone) - now)) of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store\LocalMachine\My" of native registry
Certificates - My Certificates Expiring in 1 Day - Windows
Period 15 minutes
 
  * Results in a true/false
Show indented relevance
(values "subject" of it, value "Not After" of it) of keys whose ((it > 0 * day and it < 1 * day) of (value "Not After Date" of it as string as date & (value "Not After Time" of it as string as time_of_day & local time zone) - now)) of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store\LocalMachine\My" of native registry
Certificates - My Expired Certificates - Windows
Period 1 day
 
  * Results in a true/false
Show indented relevance
(values "subject" of it, value "Not After" of it) of keys whose ((it < 0 * day) of (value "Not After Date" of it as string as date & (value "Not After Time" of it as string as time_of_day & local time zone) - now)) of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store\LocalMachine\My" of native registry

Relevance

isWindows (Relevance 1172)
Used in 1111 fixlets and 524 analyses   * Results in a true/false
Show indented relevance
windows of operating system
Used in 1 analsis   * Results in a true/false
Show indented relevance
exists value "Last Updated Date" of keys "HKEY_LOCAL_MACHINE\Software\C3 Inventory\Certificate Store" of native registry

Sharing

Social Media:
Share this page on Yammer

Comments