Discover and read the best of Twitter Threads about #ConfigMgr

Most recents (2)

@bdam555 @excelsi84 @configmgrdev @Anderson I can’t speak to the decision process led to the decision since I left. But I can speak to some of the challenges/tensions (1/?)

#configmgr #memcm #sccm #Microsoft #windows
@bdam555 @excelsi84 @configmgrdev @Anderson Historically - Microsoft has always been good at platform-ish things. Windows, Azure, System Center suite (sccm/sccm), visual studio. Things that are used to build things on top of, or things that run/contain other apps. (2/?)
@bdam555 @excelsi84 @configmgrdev @Anderson However Microsoft has not been as successful when 3rd party content is involved… think SCOM management packs. MOM was awesome when it came out with promises of great content/MPs. But even Msft 1st party MPs were few and lacking (I say humbly - owning one for years) (3/?)
Read 11 tweets
🆕 Microsoft.Workflow.Compiler sample with low VT detection!
1⃣C:\ProgramData\ccm_deploy.xml 🧐
MD5 fb98cddfa2e13334989d27d1b5b7cdda
VT (0/56): virustotal.com/gui/file/8b6d8…
2⃣Loads C:\ProgramData\package.xml
MD5 a916ca1d57d9c3b2627907ab68a264fe
VT (1/58): virustotal.com/gui/file/9a8b5…
[1/4] Image
I uploaded both to @virusbay_io: beta.virusbay.io/sample/browse/…

and the extracted payload to @anyrun_app: app.any.run/tasks/35c09520…

STDOUT:
Injection Target Process = %ProgramFiles%\Internet Explorer\iexplore.exe
PPID Spoof Parent = True
PPID Spoof Process = explorer
Returned true
[2/4] Image
@virusbay_io @anyrun_app More info on @mattifestation's method:
1⃣ My favorite implementation uploaded publicly is this Excel file (probably authored by @egyed_laszlo):
2⃣ The first workflow VT sample uploaded was ~1 year ago:

^plus background & links
[3/4]
Read 12 tweets

Related hashtags

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!