#SCCM# forest discovery accounts can be decrypted—even those for untrusted forests. If the site server is a managed client, all creds can be decrypted via Administration Service API. Check out our latest blog post from @unsigned_sh0rt to learn more. ⬇️ https://t.co/p1YH6LJNJp

Had a great time speaking with @unsigned_sh0rt about SCCM attack path prevention at SO-CON yesterday! Our slides with step-by-step instructions for mitigating the most critical SCCM attacks in your environment are at https://t.co/emsHnkbwKo

Along with this blog, I published an update to SCCMHunter that enables credential recovery all from the admin module. NAAs, client push, pxe boot password, discovery accounts, Azure app creds, etc. https://t.co/6A8LHpDDIw https://t.co/5eE2Br1iUB