C:\Windows\System32\CertLog\ folder contains a database with AD CS certificate related information. This database may be investigated in case of ad cs related abuse (ESC1, ESC2 etc....).
I'm not sure if it should be here, or directly in dissect.target without creating an associated tool.
References:
C:\Windows\System32\CertLog\ folder contains a database with AD CS certificate related information. This database may be investigated in case of ad cs related abuse (ESC1, ESC2 etc....).
I'm not sure if it should be here, or directly in dissect.target without creating an associated tool.
References: