AD CS ESC3 Certificate Request Agent Enrollment
Detects the issuance of certificates using templates associated with the Certificate Request Agent. This is a critical component of the ESC3 attack vector, where an adversary first acquires an Enrollment Agent certificate and subsequently uses it to enroll for certificates on behalf of other privileged users or principals.
Cortex XDR
