Though widely adopted, Active Directory Certificate Services (AD CS) is often misunderstood and has the potential to result in domain escalation. Download this SpecterOps research report to read about how you can detect and defend your network against possible attacks on AD CS.