Certificates Discovery

Microsoft.Certificates.Discovery.Certificates (Discovery)

Discovers certificates

Knowledge Base article:

Summary

Certificates Discovery discovers certificates on a given Windows computer.

Element properties:

TargetMicrosoft.Certificates.Store
EnabledFalse
Frequency21600
RemotableFalse

Object Discovery Details:

Discovered Classes and their attribuets:
Discovered relationships and their attribuets:

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Certificates.DataSource.Certificates Default

Source Code:

<Discovery ID="Microsoft.Certificates.Discovery.Certificates" Target="Microsoft.Certificates.Store" Enabled="false">
<Category>Discovery</Category>
<DiscoveryTypes>
<DiscoveryClass TypeID="Microsoft.Certificates.Certificate"/>
<DiscoveryClass TypeID="Microsoft.Certificates.StoreCertificate"/>
<DiscoveryClass TypeID="Microsoft.Certificates.CertificateRevocationList"/>
<DiscoveryRelationship TypeID="Microsoft.Certificates.StoreContainsCertificate"/>
<DiscoveryRelationship TypeID="Microsoft.Certificates.CRLContainsRevokedCertificate"/>
</DiscoveryTypes>
<DataSource ID="DS" TypeID="Microsoft.Certificates.DataSource.Certificates">
<!-- If this is too frequent, discoveries can start when the previous one isn't yet done -->
<IntervalSeconds>21600</IntervalSeconds>
<SyncTime/>
<StoreNameInternal/>
<LocationNameInternal/>
<SubjectIncludeRegex/>
<!-- SAMPLE: <SubjectIncludeRegex>.*</SubjectIncludeRegex>-->
<SubjectExcludeRegex/>
<IssuerIncludeRegex/>
<IssuerExcludeRegex/>
<CertificateWarningThreshold/>
<CertificateCriticalThreshold/>
<CRLUpdateThreshold/>
<VerificationFlags/>
</DataSource>
</Discovery>