learn.microsoft.com
Security Assessment: Prevent Certificate Enrollment with arbitrary Application Policies (ESC15) - Microsoft Defender for Identity
This recommendation directly addresses the recently published CVE-2024-49019, which highlights security risks associated with vulnerable AD CS configurations.
