Truvald™ Blog
Technical articles
for PKI defenders.
Long-form technical writing on Active Directory Certificate Services attack paths, detection patterns, and remediation strategy — written by the people who build Truvald™.
Truvald · ADCS Security
The Template You Locked Down Doesn't Matter If Someone Can Rewrite It: Understanding and Detecting ESC4
A defender's guide. The dangerous rights on the template object itself, why the configuration you hardened is only as good as the ACL protecting it, and how to find and close it.
Truvald · ADCS Security
The Certificate That Enrolls For Everyone Else: Understanding and Detecting ESC3
A defender's guide. The Certificate Request Agent EKU, on-behalf-of enrollment, why the fix for ESC1 and ESC2 is the enabling condition here, and how to find and close it.
Truvald · ADCS Security
The Certificate Template That Does Anything: Understanding and Detecting ESC2
A defender's guide. Two variants, why they end up in production, and how to detect and remediate by publishing only what you actively use.
Truvald · ADCS Security
The Certificate Template That Hands Out Domain Admin: Understanding and Detecting ESC1
A defender's guide. Four conditions, why they end up in production, and how to detect and remediate without breaking legitimate use cases.