Teams help-desk lures led to AD CS ESC1 and ESC8 abuse
Two unattributed intrusions used Quick Assist; one reached DCSync and exfiltration after a privileged identity was excluded from containment.
Stories per day · 30 days
1 stories, newest first · one card per story
Stories tagged #esc8