defenderAD CS audit: detecting vulnerable ESC1 templates and ESC8 endpointsAD CS audit guide: find exposed ESC1 templates and ESC8 enrollment endpoints, with a Defender XDR KQL query and remediation measures.Nov 1, 202611 min