Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
2 IOCs
Cato CTRL™ Threat Research: Preventing Privilege Escalation via Active Directory Certificate Services (ADCS)
Malware Families
Excerpt
Executive Summary Maintaining an Active Directory (AD) enterprise environment is no easy task. Between all the permissions, security compliances, update cycles, emergency patches, appliance configurations and more, covering all the bases could feel overwhelming at times and could lead to errors that may result in major consequences. For example, in the scope of authentication and credential management, IT admins tend to invest their efforts in password…
Read the original report →Diamond Model
Adversary
Infrastructure
Capability(1)
Victim
Indicators of Compromise
Open the mindmap →2 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2024-49019 | Medium | Score 51/100 | First seen |
| CVE | CVE-2021-36942 | Medium | Score 51/100 | First seen |
IOC Relationship Graph
Building graph…