تدقيق الجولة

لا توجد تناقضات مسجلة لهذه الجولة.

• {"Notes":"Source-echo searches found Microsoft-origin mirrors/derivatives rather than independent same-chain evidence.","Gap ID":"IAS-GAP-001","Impact":"Blocks attribution, prevalence and broad-campaign claims.","Status":"OPEN","Gap Type":"CAMPAIGN_IDENTITY_SCALE","Priority":"HIGH","Domain ID":"CY-DOM-004","Topic IDs":"CY-TOP-IAS-001,CY-TOP-001","Description":"No independent public incident origin currently corroborates the exact Microsoft help-desk/Quick Assist→AD CS ESC1/ESC8 chain; actor identity, victim denominator and campaign prevalence remain unresolved.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-IAS-20261101-001","Required Evidence / Resolution":"Independent IR/EDR/CERT telemetry linking the same sequence, actor/infrastructure evidence, victim counts or authoritative campaign reporting."}
• {"Notes":"Known-technique prevalence anecdotes are not treated as representative statistics.","Gap ID":"IAS-GAP-002","Impact":"Blocks population-risk quantification and generalized control-effectiveness claims.","Status":"OPEN","Gap Type":"EXPOSURE_CONTROL_OUTCOME","Priority":"MEDIUM-HIGH","Domain ID":"CY-DOM-004","Topic IDs":"CY-TOP-IAS-001","Description":"No representative denominator establishes current enterprise prevalence of exploitable ESC1/ESC8 configurations, and no multi-environment dataset measures certificate-aware containment outcomes.","Last Reviewed":"2026-11-01","Resolution Run":"ACRIP-IAS-20261101-001","Required Evidence / Resolution":"Representative AD CS posture telemetry plus independent incident/control-outcome measurements."}