HackTool - ADCSPwn Execution

SigmaHQ Detections@sigmaHQ

•updated Oct 23, 2025•0•0•1

Detects command line parameters used by ADCSPwn, a tool to escalate privileges in an active directory network by coercing authenticate from machine accounts and relaying to the certificate service