IssuancePolicy

​

Representation

The IssuancePolicy node represents the Active Directory LDAP objects of the msPKI-Enterprise-Oid class located in the OID container in the Configuration Naming Context.

​

Node properties

The node supports the properties of the table. Three types of property names will be used, depending on where the property is found:

• Entity Panel: Name shown in the BloodHound UI.
• Database: Name stored in the BloodHound database and returned by the BloodHound API. This is to be used when running Cypher queries.
• Directory: Name collected from the directory the node is stored in, for example, the LDAP name for an Active Directory property.

​

Edges

The following edge types may be linked to/from this node. See the edges documentation for more information on the edge types.

​

Incoming edges

​

Outgoing edges

​

References

• ADCS ESC13 Abuse Technique
• Authentication Mechanism Assurance for AD DS in Windows Server 2008 R2 Step-by-Step Guide
• Use Authentication Mechanism Assurance (AMA) to secure administrative account login