The Cyber Threat Perspective

Episode 142: How Active Directory Certificates Become Active Threats

SecurIT360 Season 1 Episode 142

In this episode, we're diving into one of the most overlooked yet dangerous components of Active Directory: Certificate Services. What was designed to build trust and secure authentication is now being exploited by attackers to silently escalate privileges and persist in your environment. We’ll break down how AD CS works, how it gets abused, and what defenders need to do to lock it down.

Blog: https://offsec.blog/
Youtube: https://www.youtube.com/@cyberthreatpov
Twitter: https://x.com/cyberthreatpov

Follow Spencer on social ⬇
Spencer's Links: https://click.spenceralessi.com/mylinks

Work with Us: https://securit360.com

People on this episode