ADCS (Active Directory Certificate Services)

A Microsoft service that manages the issuance and validation of digital certificates within an Active Directory domain. When misconfigured (permissive certificate templates, ESC1 through ESC8 attack paths), ADCS lets a low-privileged user obtain a certificate impersonating an administrator and then compromise the entire domain. It has become one of the most exploited privilege-escalation vectors in enterprise Windows environments.