VQL Reference Windows certificates certificates Plugin Required permissions: MACHINE_STATE Description Collect certificate from the system trust store. This plugin uses the Windows APIs to fetch the certificates. You might also want to look at the Windows.System.RootCAStore artifact.