Searching protocol for "esc1"
Audit & abuse AD CS misconfigurations.
Impersonate domain users via AD CS abuse.
Exploit ADCS via ACLs and NTLM relay.