Active Directory Certificate Services (AD CS) is one of the most powerful — and most overlooked — components in a Windows enterprise. It underpins smartcard authentication, LDAPS, VPN auth, device identity, and more. Unfortunately because of it’s power, threat actors often use it as part of their privilege escalation process. Protecting Active Directory Certificate Services

Active Directory (AD) serves as the backbone of IT in many organizations. Securing active directory is vital to providing your data’s confidentiality, integrity and availability. In the countless number of incident response engagement’s I’ve been involved, privilege escalation techniques were used 95% of the time to access and compromise AD. Because of its critical role,