This post provides attack flow of CVE-2022-26923 exploitation in ADCS and AD Servers.

This post provides details on the modern attack paths in Active Directory Certificate Services, how to hunt these techniques and controls to defend.

This post provides details about the queries that can be used to hunt various attack techniques in Microsoft 365 environment.

This post provides areas of security exposure in Active Directory Certificate Services(ADCS) and the related techniques that the threat actors can use to target ADCS and how to detect these attack techniques.

This post provides reference to my contribution in MITRE ATT&CK Technique T1649

This post provides three areas of security exposure in hybrid active directory and the related techniques that the threat actors can use to target hybrid Active Directory and how to detect these attack techniques.

I have shared my thoughts on Active Directory attack vectors and security controls with Dark Reading journal.