| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| Collection Rule for event with source CertificationAuthority and ID 10 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.10 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 100 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.100 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 101 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.101 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 102 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.102 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 103 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.103 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 104 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.104 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 105 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.105 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 106 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.106 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 107 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.107 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 108 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.108 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 109 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.109 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 110 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.110 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 127 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.127 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 128 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.128 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 129 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.129 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 130 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.130 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 131 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.131 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 132 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.132 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 133 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.133 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 16 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.16 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 17 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.17 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 19 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.19 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 20 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.20 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 21 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.21 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 22 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.22 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 25 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.25 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 26 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.26 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 27 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.27 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 28 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.28 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 29 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.29 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 33 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.33 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 34 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.34 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 35 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.35 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 38 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.38 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 39 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.39 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 40 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.40 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 42 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.42 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 43 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.43 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 44 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.44 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 45 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.45 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 46 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.46 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 48 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.48 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 49 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.49 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 5 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.5 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 51 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.51 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 52 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.52 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 53 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.53 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 54 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.54 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 55 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.55 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 56 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.56 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 57 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.57 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 58 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.58_Error | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for error event with source CertificationAuthority and ID 58 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.58_Info | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for informational event with source CertificationAuthority and ID 59 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.59 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 6 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.6 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 60 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.60 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 62 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.62 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 63 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.63 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 64 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.64 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 65 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.65 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 66 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.66 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 67 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.67 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 68 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.68 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 69 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.69 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 7 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.7 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 70 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.70 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 71 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.71 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 72 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.72 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 73 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.73 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 74 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.74 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 75 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.75 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 76 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.76 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 77 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.77 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 78 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.78 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 79 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.79 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 8 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.8 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 80 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.80 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 81 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.81 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 82 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.82 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 83 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.83 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 84 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.84 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 85 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.85 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 86 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.86 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 87 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.87 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 88 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.88 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 9 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.9 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 90 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.90 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 91 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.91 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 92 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.92 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 93 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.93 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 94 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.94 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 95 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.95 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 96 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.96 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 97 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.97 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | False |
| Collection Rule for event with source CertificationAuthority and ID 98 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.98 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |
| Collection Rule for event with source CertificationAuthority and ID 99 | Microsoft.Windows.CertificateServices.CARole.2008.CertSvcEvents.99 | Microsoft.Windows.CertificateServices.CARole.2008 | EventCollection | True | True |