Skip to content

TROOPERS25: Misconfiguration Manager

Still OverlookedStill Overprivileged

Presents TROOPERS25: Misconfiguration Manager and evaluates key implications for security practitioners.

Summary

Overview: Misconfiguration Manager: Still Overlooked, Still Overprivileged Duane Michael and Garrett Foster of SpecterOps. Follow-up on SCCM / Microsoft Configuration Manager attack paths. New tradecraft for credential access, privilege escalation, domain compromise; COERCE techniques; updates to SCCM Attack & Defense Matrix. Slides: https://troopers.de/downloads/troopers25/TR25_%20Misconfiguration_Manager_3FSJH7.pdf

Related talks