Title. Is in Pingcastle. https://github.com/GhostPack/PSPKIAudit?tab=readme-ov-file#esc5---vulnerable-pki-ad-object-access-control