Truvald™ Blog
Technical articles
for PKI defenders.
Long-form technical writing on Active Directory Certificate Services attack paths, detection patterns, and remediation strategy — written by the people who build Truvald™.
Truvald · ADCS Security
The Certificate Template That Does Anything: Understanding and Detecting ESC2
A defender's guide. Two variants, why they end up in production, and how to detect and remediate by publishing only what you actively use.
Truvald · ADCS Security
The Certificate Template That Hands Out Domain Admin: Understanding and Detecting ESC1
A defender's guide. Four conditions, why they end up in production, and how to detect and remediate without breaking legitimate use cases.