From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
Published 2026-10-30T16:11:44Z•e26238c5b4c5c7e76f4f896f4654c37480bce5bccd2f1fc0762f0301e98d8311
Source metadata
- Publication date
- 2026-10-30T16:11:44Z
- Source identifier
- https://www.microsoft.com/en-us/security/blog/?p=150668
- Public record ID
- record:sha256:e26238c5b4c5c7e76f4f896f4654c37480bce5bccd2f1fc0762f0301e98d8311
This is source-provided metadata, not an enriched summary or an impact assessment. Follow the canonical source link for the published material.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- e26238c5b4c5c7e76f4f896f4654c37480bce5bccd2f1fc0762f0301e98d8311
- Record type
- Source metadata
This record may overlap with other records. Source metadata can be incomplete or change. Validate consequential decisions against the linked source and your own environment.