Active Directory PetitPotam and Coercion Attacks: Forcing Authentication and Relaying to AD CS How PetitPotam coerces machine authentication via MS-EFSRPC and relays it to AD CS for domain compromise — with detection and defense. 2026.05.04 Active DirectoryWindows Privesc