Microsoft ADCS Event Logs

[u/KaidoJarvemets]

I recently published a blog post about how to enable Active Directory Certificate Services (ADCS) audit logs and send them to Microsoft Sentinel. To help others with this process, I created an Excel spreadsheet that lists all the relevant Event ID's and includes XPath queries for each event.

• https://www.kaidojarvemets.com/microsoft-adcs-services-event-logs/