Query Details

Show All Self Signed Certificates

Query

Use Case: Identifying self-signed certificates in a network to assess security risks.

Query:

Certificate
| where SelfSigned == true
| project SubjectName, CommonName, SelfSigned

Explanation

The query is looking for certificates in a network that are self-signed, meaning they were not issued by a trusted certificate authority. It retrieves the subject name, common name, and self-signed status of these certificates. This information helps assess potential security risks.

Details

Ugur Koc profile picture

Ugur Koc

Released: February 4, 2024

Tables

Certificate

Keywords

Certificate,SelfSigned,SubjectName,CommonName

Operators

|where==trueproject

Actions