Misconfiguration Manager - Still Overlooked, Still Overprivileged

Explore the persistent security vulnerabilities in Microsoft System Center Configuration Manager (SCCM) through this 30-minute conference talk from TROOPERS25. Discover how SCCM continues to be misconfigured in enterprise environments, creating significant security risks through excessive privileges and overlooked attack vectors. Learn about common misconfigurations that attackers exploit, understand the privilege escalation opportunities these create, and examine real-world scenarios where SCCM weaknesses have been leveraged for lateral movement and domain compromise. Gain insights into proper SCCM hardening techniques, security best practices for deployment and maintenance, and detection strategies to identify potential misuse of this critical infrastructure management tool.