AD CS
ADCS ESC1 and ESC4 Explained
Understanding Active Directory Certificate Services vulnerabilities: ESC1 and ESC4 attack techniques, how they work, and how to prevent them.
13 min read
Updated January 22, 2025
adcscertificatesattack pathsesc1esc4
Related Resources
Attack Paths
15 min
Top Active Directory Misconfigurations
Common AD misconfigurations that create attack paths: weak delegation, permissive ACLs, trust abuse, and GPO issues.
misconfigurationsattack pathshardening
Attack Paths
14 min
How Attackers Become Domain Admin
Understand the common attack paths from initial access to domain compromise: privilege escalation, lateral movement, and credential theft.
attack pathsprivilege escalationdomain admin
Need this validated in your environment?
Our Active Directory security assessment identifies these issues and provides prioritized remediation guidance.
Learn About AD Security Assessments