get_enterprise_ca_controllers
Identify controllers of an Enterprise Certificate Authority to detect ESC3 and ESC6 attack paths in Active Directory security assessments.
Instructions
Retrieves the controllers of a specific Enterprise Certificate Authority.
Controllers of an Enterprise CA can issue arbitrary certificates and potentially compromise the domain.
This is critical for identifying ESC3 and ESC6 attack paths.
Args:
ca_id: The ID of the Enterprise CA to query
limit: Maximum number of controllers to return (default: 100)
skip: Number of controllers to skip for pagination (default: 0)
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ca_id | Yes | ||
| limit | No | ||
| skip | No |