Detection rules › By eventMicrosoft-Windows-CAPI2 event 702 detection rules reference this event. View event page.Sigma (1)Certificate Private Key Acquired severity medium T1649 Splunk (1)Windows Steal Authentication Certificates CryptoAPI T1649