Detection rules › By eventMicrosoft-Windows-CertificationAuthority event 531 detection rule reference this event. View event page.Sigma (1)Active Directory Certificate Services Denied Certificate Enrollment Request severity low T1553.004