Active Directory Certificate Services (AD CS) is a Microsoft server role that implements public key infrastructure (PKI). In this session, we’ll talk through the basics of AD CS, discuss a few attacks, and run an attack to get Domain Admin.