Certificate Exported From Local Certificate Store — Detection Rule

Detects when an application exports a certificate (and potentially the private key as well) from the local Windows certificate store.