Certighost exploit lets a domain user obtain a Domain Controller certificate and reach DCSync through a vulnerable AD CS ...