certutil

certutil is a command-line utility that can be used to obtain certificate authority information and configure Certificate Services. [1]

ID: S0160
Associated Software: certutil.exe
Type: TOOL
Platforms: Windows
Version: 1.5
Created: 14 December 2017
Last Modified: 27 November 2024

Techniques Used

Domain ID Name Use
Enterprise T1560 .001 Archive Collected Data: Archive via Utility

certutil may be used to Base64 encode collected data.[1][2]

Enterprise T1140 Deobfuscate/Decode Files or Information