How to integrate Windows CLi certutil command as a relevance?

Hi,

I am searching for solution on how to create as well as integrate Windows CLi command “certutil -store my” as a managed property/relevance for detection.

I am trying to detect CA Issuer and date of expiry.

Any Bigfix expert out there who can advise me.

Thank you.

You would need to execute the certutil command via a fixlet/task actionscript, write the results out to a file and then have the Analysis property read the file contents. Relevance is not able to execute scripts.

If you’re interested in bridging the gap between scripted output and relevance, please vote for this idea:

Add a new “Scripted Properties” functionality that combines Properties and Actions