Hallo zusammen,
sofern nicht selber schon gesehen/-lesen hier [0] FYI
"Locksmith" - small tool built to detect and fix common misconfigurations in Active Directory Certificate Services.
--> siehe dazu auch den Artikel [1] von Mandiant "Active Directory Certificate Services: Modern Attack Paths, Mitigations, and Hardening"
VG
Bernd
[0] https://github.com/TrimarcJake/Locksmith
[1] https://services.google.com/fh/files/misc/active-directory-certificate-servi...
rwth-security@lists.rwth-aachen.de