fix: ensure that nested IssuedSignedBy relationships expand in adcs e…

…sc1 composition (#285)
SpecterOps · Jan 3, 2024 · 4088c6e · 4088c6e
1 parent db38103
commit 4088c6e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/go/analysis/ad/ad.go b/packages/go/analysis/ad/ad.go
@@ -513,7 +513,7 @@ func ADCSESC1Path1Pattern(domainID graph.ID) traversal.PatternContinuation {
 			),
 		)).
 		Outbound(query.And(
-			query.KindIn(query.Relationship(), ad.PublishedTo),
+			query.KindIn(query.Relationship(), ad.PublishedTo, ad.IssuedSignedBy),
 			query.Kind(query.End(), ad.EnterpriseCA),
 		)).
 		Outbound(query.And(