SCCM Exploitation: Compromising Network Access Accounts
May 2, 2024 Authors: Marshall Price and Connor Dowling TL;DR: SCCM Network Access Accounts (NAA) are frequently used despite being associated with several attack primitives.
Archive
SCCM Exploitation: Account Compromise Through Automatic Client Push & AD System Discovery
March 28, 2024 Author: Marshall Price, Senior Security Consultant TL;DR: The following conditions can lead to compromise of the SCCM client push account and SCCM machine account.