Cleartext credentials in an SCCM configuration file allowed the red team to perform a DCSync attack, and a real alert on an SCCM server was dismissed as a false positive, highlighting the importance of asset management.
Cleartext credentials in an SCCM configuration file allowed the red team to perform a DCSync attack, and a real alert on an SCCM server was dismissed as a false positive, highlighting the importance of asset management.