SpecterOps(@SpecterOps ):#SCCM forest discovery accounts can be decrypted—even those for untrusted forests. If the site server is a managed client, all creds can be decrypted via Administration Service API. Check out our latest blog post from @unsigned

SpecterOps

@SpecterOps

Know Your Adversary - Adversary Simulation | Detection | Resilience

Joined January 2017

390 Following 37.5K Followers

SpecterOps@SpecterOps

2025.03.06 21:14

#SCCM# forest discovery accounts can be decrypted—even those for untrusted forests. If the site server is a managed client, all creds can be decrypted via Administration Service API. Check out our latest blog post from @unsigned_sh0rt to learn more. ⬇️ https://t.co/p1YH6LJNJp