System Center Configuration Manager (SCCM) is a high-value target: adversaries can abuse SCCM for domain-wide persistence, privilege escalation, lateral movement, and even as a stealthy command-and-control (C2) channel. The presentation provides practical guidance on detecting and monitoring SCCM misuse, along with tools and methods to secure and audit the platform.
Event: DEF.CAMP
VIDEO RECORDING
- Red plus Blue makes Purple!/
- Public talks/
- 2025/
- C2 by Microsoft: What can go wrong if SCCM ends up in the wrong hands/
C2 by Microsoft: What can go wrong if SCCM ends up in the wrong hands
·1 min·
Related
