---
id: 5790
title: "Exploiting the Intruder’s Dilemma for Active Directory Defense"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/exploiting-intruders-dilemma-for-active-directory-defense/"
published_at: "2025-05-20T13:43:25Z"
tags: ["active-directory", "defense", "ad-cs", "deception", "honeypot", "certificate-security"]
phying_url: "https://phying.com/item/5790"
lang: en
---

# Exploiting the Intruder’s Dilemma for Active Directory Defense

## Summary

Attackers need only one weakness to break in but must stay hidden afterward. The post shows how to use that intruder's dilemma with decoys such as seemingly vulnerable AD CS certificate templates.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2025-05-20T13:43:25Z
- **Original:** https://www.semperis.com/blog/exploiting-intruders-dilemma-for-active-directory-defense/
- **Phying News:** https://phying.com/item/5790