Skip to main content

Certificate indicators

The Certificate Indicator feeds provide continuous streams of code signing certificates and their associated samples, helping detect impersonation attempts and compromised certificates.

Common Use Cases​

Track certificates signing malware​

  • Certificate feed (TCF-0601) - Continuous list of certificates with signed samples, filterable by classification. Includes certificate chain of trust and validation status.

All Certificate Indicator Feeds​