DriverShield - Code Signing Atlas

Browse certificate signers observed across analyzed Windows kernel drivers. Aggregate verdicts and sample distribution per signer.

Code Signing Atlas

Driver code-signing certificates observed across analyzed Windows kernel drivers. The atlas exposes aggregate verdict patterns per signer - useful for tracking signers whose certificates have been abused in BYOVD campaigns, and for distinguishing legitimate vendor signers from compromised or revoked ones.

Microsoft Windows — 89 samples
Symantec Time Stamping Services CA - G2 — 34 samples
Microsoft Windows Hardware Compatibility Publisher — 32 samples
DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1 — 11 samples
VeriSign Time Stamping Services Signer - G2 — 6 samples
GlobalSign — 5 samples
Sectigo Public Code Signing Root R46 — 5 samples
DigiCert Trusted Root G4 — 4 samples
Intel Corporation — 4 samples
GlobalSign Timestamping CA - G2 — 3 samples
Advanced Micro Devices Inc. — 3 samples
Microsoft Windows Hardware Abstraction Layer Publisher — 2 samples
DigiCert Timestamp 2021 — 2 samples
AddTrust External CA Root — 2 samples
COMODO Time Stamping Signer — 2 samples
DigiCert High Assurance EV Root CA — 2 samples
VeriSign Time Stamping Services CA — 1 sample
GlobalSign Root CA — 1 sample
Wistron Corporation — 1 sample
Remko Weijnen — 1 sample
BattlEye Innovations e.K. — 1 sample
Sqa.com(Test) — 1 sample
GlobalSign Timestamping CA — 1 sample
Certum Time-Stamping Authority — 1 sample
Noriyuki MIYAZAKI — 1 sample
namazso.eu — 1 sample
GlobalSign Extended Validation CodeSigning CA - SHA256 - G3 — 1 sample
WDKTestCert marco,133369735024704270 — 1 sample
Quanta Computer Inc. — 1 sample
Silicon Laboratories Inc. — 1 sample

Browse the related CVE library and full driver database.