Certificates

Private Key File Patterns

Common private-key file names and extensions. Content verification is useful because extensions alone do not prove a file contains a private key.

Metadata

  • id: certificates.private-key-files
  • category: certificates
  • sensitivity: high
  • artifact types: private-key, certificate

Path Matchers

PathKindPlatforms
/etc/ssl/private/directorylinux
/etc/letsencrypt/live/**/*.pemgloblinux
/etc/letsencrypt/live/**/*.keygloblinux
**/*.keyglobwindows, linux, macos
**/*.pemglobwindows, linux, macos
**/*.p12globwindows, linux, macos
**/*.pfxglobwindows, linux, macos

Content Indicators

Regular expressions:

  • -----BEGIN [A-Z ]*PRIVATE KEY-----

Credential Types

  • private-key

Impact

  • credential_access

References

On this page