CISA AA26-237A: Two SOCs, Both Compromised

Red team tradecraft, ADCS ESC1, ADConnect credentials, and critical infrastructure detection gaps