ReynardSec@reynardsec@infosec.exchange
If you're using the #activedirectory and AD CS, check this out 👇
http://github.com/Sleepw4lker/TameMyCerts
"TameMyCerts is a policy module for Microsoft Active Directory Certificate Services (AD CS) enterprise certification authorities that enables security automation for a lot of use cases in the PKI field."
"It supports, amongst other functions, inspecting certificate requests for certificate templates that allow the subject information to be specified by the enrollee against a defined policy. If any of the requested identities violates the defined rules, the certificate request automatically gets denied by the certification authority."
#windows #sysadmin #devops #infosec #cybersecurity #threatintel #sysops #itsecurity