Top 10 misconfigurations: NSA checklist for CISOs flags Active Directory Certificate Services
"In some cases, the actor may be restricted or detected by advanced defense-in-depth and zero trust implementations as well, but this has been a rare finding in assessments thus far"
