Searching protocol for "esc8"
Audit & abuse AD CS misconfigurations.
Exploit ADCS via ACLs and NTLM relay.