Microsoft Threat Intelligence traced two intrusions from Teams help desk impersonation to ESC1 and ESC8 certificate abuse, ending in DCSync and data theft.
The post Microsoft Ties Help Desk Impersonation to AD CS Certificate Theft appeared first on Techaeris and was written by Alex Hernandez.
