get_enterprise_ca_controllers
Identify controllers of an Enterprise Certificate Authority to detect ESC3 and ESC6 attack paths where compromised CAs can issue arbitrary certificates and potentially compromise the domain.
Instructions
Retrieves the controllers of a specific Enterprise Certificate Authority.
Controllers of an Enterprise CA can issue arbitrary certificates and potentially compromise the domain.
This is critical for identifying ESC3 and ESC6 attack paths.
Args:
ca_id: The ID of the Enterprise CA to query
limit: Maximum number of controllers to return (default: 100)
skip: Number of controllers to skip for pagination (default: 0)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ca_id | Yes | ||
| limit | No | ||
| skip | No |