Active Directory Certificate Services
Active Directory Certificate Services is a critical component within enterprise networks.
ADCS provides public key infrastructure (PKI) for managing digital certificates used in encryption, authentication and digital signatures.
Often overlooked in security Audits, leaving vulnerable to exploitation. Misconfiguration can lead to privilege escalation, lateral movement, and persistent attacks within compromised environments.
There are several ways to abuse misconfigurations in Certificate Authority Server, and thus can be difficult to detect and respond as these utilise legitimate functionality (Living off the the Land) within ADCS, and by nature the certificates remain active for extended period of time.