DriverShield - Driver Code Signing Atlas & Certificate Index

Atlas of code-signing certificates observed across analyzed Windows kernel drivers. Aggregate verdicts and sample distribution per Authenticode publisher.

Code Signing Atlas

Driver code-signing certificates observed across analyzed Windows kernel drivers. The atlas exposes aggregate verdict patterns per signer - useful for tracking signers whose certificates have been abused in BYOVD campaigns, and for distinguishing legitimate vendor signers from compromised or revoked ones.

Microsoft Windows — 92 samples
Symantec Time Stamping Services CA - G2 — 38 samples
Microsoft Windows Hardware Compatibility Publisher — 33 samples
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 — 15 samples
VeriSign Time Stamping Services Signer - G2 — 7 samples
GlobalSign — 6 samples
Sectigo Public Code Signing Root R46 — 6 samples
DigiCert Trusted Root G4 — 4 samples
Intel Corporation — 4 samples
Advanced Micro Devices Inc. — 4 samples
GlobalSign Timestamping CA - G2 — 3 samples
Microsoft Windows Hardware Abstraction Layer Publisher — 2 samples
DigiCert Timestamp 2021 — 2 samples
AddTrust External CA Root — 2 samples
COMODO Time Stamping Signer — 2 samples
DigiCert High Assurance EV Root CA — 2 samples
VeriSign Time Stamping Services CA — 1 sample
GlobalSign Root CA — 1 sample
Wistron Corporation — 1 sample
Remko Weijnen — 1 sample
BattlEye Innovations e.K. — 1 sample
Sqa.com(Test) — 1 sample
GlobalSign Timestamping CA — 1 sample
Certum Time-Stamping Authority — 1 sample
Noriyuki MIYAZAKI — 1 sample
namazso.eu — 1 sample
GlobalSign Extended Validation CodeSigning CA - SHA256 - G3 — 1 sample
WDKTestCert marco,133369735024704270 — 1 sample
Quanta Computer Inc. — 1 sample
Silicon Laboratories Inc. — 1 sample

Browse the related CVE library and full driver database.