AD Rights Management Service (Part 2): Extraction, Offline Decryption, and the Unrotatable Key
Huntress research shows AD RMS SLC root key is unrotatable and never expires, so its compromise permanently exposes all RMS-protected documents.
58
Product
AD RMS
- Mentions · 7d0
- Mentions · 30d0
- All mentions2
- First seenSep 8, 2026
- Last mentionedSep 10, 2026
Timeline
2 articles · newest firstAD Rights Management Service (Part 1): Architecture, Deprecation, and Reconnaissance
Huntress maps AD RMS architecture and recon paths, setting up an offline key-extraction attack against its unrotatable 255-year root key.
55
Appears with
- Huntressvendor · 2
- Microsoftvendor · 2
- Huntressorganization · 1
- SANSorganization · 1
- Outlookproduct · 1
- Officeproduct · 1
- Windows Server 2025product · 1
- SQL Serverproduct · 1
- SharpRMSproduct · 1
- SharePointproduct · 1
- Azure Information Protectionproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.