CmdID

CmdID / PowerShell / Cmdlets / Export

Export-PfxCertificate

Exports a certificate or a PFXData object to a Personal Information Exchange (PFX) file. Windows Server PowerShell reference

From the Windows Server PowerShell reference 12 parameters 1 Sigma rule looks for it Its page in the reference

Opens CmdID with your command, read as PowerShell. It is read in your browser and sent nowhere.

Parameters

12 in the Windows Server PowerShell reference
-Cert, -PsPathSpecifies the path to the certificate to be exported.
-ChainOptionSpecifies the options for building a chain when exporting certificates.
-Confirm, -cfPrompts you for confirmation before running the cmdlet.
-CryptoAlgorithmOptionSpecifies the algorithm for encrypting private keys within the PFX file.
-FilePathSpecifies the path for the PFX file to be exported.
-ForceSpecifies that the provided PFX file should be overwritten, even if the Read-only attribute is set on the file.
-NoClobberSpecifies that if the PFX file already exists, it should not be overwritten.
-NoPropertiesSpecifies whether the extended properties for a certificate are exported.
-PFXDataSpecifies a PFXData object that contains one or more certificates from a PFX file.
-PasswordSpecifies the password used to protect the exported PFX file.
-ProtectToSpecifies an array of strings for the username or group name that can access the private key of PFX file without any password.
-WhatIf, -wiShows what would happen if the cmdlet runs.

What looks for it

Sigma process creation rules that name Export-PfxCertificate
mediumCertificate Exported Via PowerShellNasreddine Bencherchali (Nextron Systems)